Hardening macOS

• CIS-for-macOS-Catalina-CP

  1 120 0.0 Shell

  CIS Benchmarks for macOS Catalina

  

You can get most of the way to hardening to CIS level 1 picking more up-to-date fork of these https://github.com/jamf/CIS-for-macOS-Catalina-CP.

FWIW, CIS level 1 will mean people get locked out of their machines very frequently. Complex 15 character passwords with 3 retries from memory. So you need a half-decent MDM to unlock quickly. There is no half-decent MDM out there. Only shit ones but workable like Jamf.

Also you the username does't get auto-populated on login so the typo can be in username and user assumes it is with password. Very fast way to get lock outs.

To pass a full security review you might want to play with Google Santa. But that is intense.

• santa

  22 4,327 8.9 Objective-C

  A binary authorization and monitoring system for macOS

  

> Install and configure Google’s Santa.

Interesting, I'd never heard of this before. "A binary authorization system for macOS". Open source.

https://github.com/google/santa

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• macos_security

  18 1,598 8.9 YAML

  macOS Security Compliance Project

  

Suggest a related project