Mobile // Mobile Devices
Commentary
9/16/2008
06:22 PM
Thomas Claburn
Thomas Claburn
Commentary
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

NSA Offers Security Advice For Macs

The National Security Agency (NSA) has posted Security Configuration Guidelines for Apple's Mac OS X 10.5 (Leopard) operating system.

The National Security Agency (NSA) has posted Security Configuration Guidelines for Apple's Mac OS X 10.5 (Leopard) operating system.While the agency's advice may not be sufficient to stop a government agency like, say, the NSA, from accessing one's Mac, it should significantly improve one's security posture against less capable hackers.

The NSA recommends:

Don't access the Internet or read e-mail using an Admin Account. Admin Accounts should be used for system administration tasks only.

Use Apple's Software Update control panel to keep systems up-to-date. Set it to check for updates daily. In environments not connected to the Internet, verify that the SHA-1 digest of downloaded updates matches Apple's published digest.

In the System Preferences Accounts Pane, disable Automatic Login, User List, guest accounts, and sharing.

In the System Preferences Security Pane, set Require Password when waking the computer from sleep or a screensaver. Also, disable automatic login, use secure virtual memory, and disable remote control infrared receiver if present. Consider activating FileVault, particularly for portable systems.

In the Firewall tab, select "Allow only essential services." Click the Advanced button and enable Firewall Logging and Stealth Mode.

The NSA recommendations also cover securing users' home folder permissions, physical security, disabling IPv6, AirPort and other unnecessary services when not needed, disabling Setuid and Setgid binaries, configuring and using both firewalls, among other suggestions.

Check out the details at the NSA's site.

If you get stuck, you can always try picking up the phone and asking a question. You never know who might be listening.

Comment  | 
Print  | 
More Insights
Building A Mobile Business Mindset
Building A Mobile Business Mindset
Among 688 respondents, 46% have deployed mobile apps, with an additional 24% planning to in the next year. Soon all apps will look like mobile apps – and it's past time for those with no plans to get cracking.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest - September 10, 2014
A high-scale relational database? NoSQL database? Hadoop? Event-processing technology? When it comes to big data, one size doesn't fit all. Here's how to decide.
Flash Poll
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
A look at the top stories from InformationWeek.com for the week of September 7, 2014.
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.