• Mac OS X,  Mac OS X Server,  Mac Security

    Create Crypt Password Hashes

    Linux and OS X come with the makekey command installed, usually in /usr/libexec/makekey. You can use this binary to create /etc/passwd file entries of hashed passwords. To use the command, simply pipe some text into the command. Here, we’ll echo testpassword into makekey: echo testpassword | /usr/libexec/makekey And we’ll get a simple output, such as: woNH11o4mqvAc There are certainly other ways to do something like this, but when writing a script you may use in either a Linux or OS X environment, this is one place where you should have a modicum of success crossing platforms.

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Securely Erase Freespace and Volumes In OS X Without Disk Utility

    One of the options thats a tad bit hidden in OS X is the Secure Erase option, which runs a multi-pass erase on a volume. Additionally, there’s no option to Secure Erase free space on a volume. But you can still securely erase whatever you’d like (other than you boot volume obviously), when needed. To do so, use the diskutil command along with the secureErase option. The format of the command to secureErase freespace is: diskutil secureErase freespace [level] [device] The levels are as follows (per the man page as not all of these are specified in Disk Utility): Single-pass zero-fill erase Single-pass random-fill erase US DoD 7-pass secure erase…

  • Mac OS X,  Mac OS X Server,  Mac Security

    Enable The Built-In Web Server In OS X

    OS X has a built-in web server called Apache. It’s been there for a long, long time. Once upon a time, you could enable web sharing using System Preferences. This is no longer a feature in the Sharing System Preference pane, but you can actually enable it quicker than you could before. To do so, we’ll use apachectl: /usr/sbin/apachectl start To then stop the web server: /usr/sbin/apachectl stop To see the apache status: /usr/sbin/apachectl status Or: /usr/sbin/apachectl fullstatus The default site is stored in /Library/WebServer/Documents. You can then edit this there, or replace the index.html.en file with a file/hierarchy that you wish to have. Enjoy.

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment,  Unix

    Bash: Check That A Script Is Running As Root

    Pretty much every script I’m working on these days must be run as root. Checking what user is running something is pretty straight forward, as there’s a built-in shell variable for $USER that contains the user running a script. To see this real quick, simply run the following: echo $USER You can then put this into your scripts. I’ve been using the same block of code for decades, which can be run in a script by itself if you’d like to paste this into one. if [[ $USER != "root" ]]; then echo "This script must be run as root" else echo "You are root" exit 1 fi Note: Keep in mind…

  • Articles and Books,  Bushel,  Business,  Mac OS X,  Mac Security

    16 Apple Security Advances To Take Note Of in 2016

    My latest Huffington Post piece is up. Apple has long been known for providing an exceptional user experience. But many might not realize that over the past few years, they’ve been pushing the infosec envelope, by making advanced security options accessible to everyday users. While not all of these features are new in El Capitan, here are 16 features that Apple has built into OS X that every user has simple access to: Read more on Apple’s Security Tech at: http://www.huffingtonpost.com/charles-edge/16-apple-security-advances-to-take-note-of-in-2016_b_8789456.html And if you’d like to know more in depth information about Apple security, check out my latest book on Apple Security in the Enterprise on Amazon!  

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Troubleshoot Spotlight Indexing Issues Using mddiagnose

    Spotlight just kinda’ works. Except when it doesn’t. Which is luckily pretty rare, for the use cases that Spotlight was designed for. But when it doesn’t work, you have a few tools that I’ve highlighted over the years to help you out, including articles on shared volumes, manually indexing, disabling Spotlight, and a few others. But what if you need to go in more depth to isolate an issue? For this, Apple has provided us with a tool called mddiagnose, in /usr/bin. In the following command, we’ll run an mddiagnose to dump a bunch of system statistics that we can then look at. Here, we’ll do that to a folder…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Add Another Partition To Your Mac

    By default, most computers come with one partition and one volume on that partition. Well, in OS X there’s also a recovery partition, but that’s hidden so we’ll pretend like there’s just one. You can create additional volumes, which are useful for a number of different scenarios. The operation of creating partitions usually involves resizing a partition. That can be somewhat dangerous, so make sure to backup your Mac before doing so. To create an additional partition (and by default an HFS+ filesystem on that partition), first open Disk Utility from /Applications/Utilities. Note that by default, the boot volume is highlighted. You can’t create a partition inside a volume or…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment,  public speaking

    Use the JAMF Discount for MAC AD UK

    I’m gonna’ be speaking at the inaugural Mac Admin and Developer Conference, from Amsys in London. JAMF Software is sponsoring Mac Admin & Developer Conference in London, on Feb 9th and 10th. And this gives us the chance to help promote a 15% off discount on the normal ticket price of £497 + VAT, promo price: £422 + VAT. JAMF has a landing page on our site to help you use our discount at http://www.jamfsoftware.com/events/mac-admin-developer-conference-uk/. To get the discount, simply email hello@macad.uk and mention JAMF!