List those local users on the computer using this command: dscl localhost list /Local/Default
-
-
Did you know?
Firewire gives direct access to a systems memory.
-
Mac OS X: Find SetUID files
Granted it really doesn’t matter any more now that they’re not allowed, but if you need to find them here ya’ go: find / -type f ( -perm -4000 -o -perm -2000 ) -exec ls -al {} ; 2>/dev/null
-
Mac OS X: Enable X11 Forwarding
In the /etc/sshd_config file is a line that says: #X11Forwarding no You can change this to: X11Forwarding yes That will enable X11 forwarding. Of course, only do this if you know why (ergo I will not spell it out for you right now).
-
PGP FDE for Mac OS X
OK, so you can encrypt disks, but not the startup disk – although if you could (and you will be able to soon) then it would be far easier to mass deploy than other solutionz…
-
Bind to AD Using the Command Line
dsconfigad can be used to bind to Active Directory from the command line. Use as follows: dsconfigad -h dsconfigad -show [-lu username] [-lp password] dsconfigad [-f] [-a computerid] -domain fqdn -u username [-p password] [-lu username] [-lp password] [-ou dn] [-status] dsconfigad -r -u username [-p password] [-lu username] [-lp password] dsconfigad [-lu username] [-lp password] [-mobile enable | disable] [-mobileconfirm enable | disable] [-localhome enable | disable] [-useuncpath enable | disable] …
-
Mac OS X: Disable Delayed ack
Edit /etc/sysctl.conf as follows: net.inet.tcp.delayed_ack = 0
-
Mac OS X: Using OPFW
To set a password with OPFW: sudo OFPW -pass mypassword To set firmware mode to command mode: sudo /usr/local/bin/OFPW -mode 1
-
Mac OS X Security: Install SAINT
To install SAINT, download it open up Terminal and set your working directory to the directory it was downloaded to. To start the installer: sudo ./saint-install-<VERSION> To start SAINT, use this command: sudo ./saint
-
securemac.com
This site isn’t being updated enough. Maybe I should start my own security site for the Mac. Not that I have time… Hmmmm…