Baseline Security Configuration For MacOS
Switch branches/tags
Nothing to show
Clone or download
jgamblin Remove SSID Cleanup
Remove SSID Cleanup
Latest commit 6c2cbbe Aug 28, 2018
Failed to load latest commit information.
.gitattributes Initial commit Nov 10, 2017
LICENSE Initial commit Nov 10, 2017 Fix Indent Aug 28, 2018 Remove SSID Cleanup Aug 28, 2018

MacOS Security Baseline

This is a simple shell script that configures some of the most commonly recommended MacOS security settings that are not enabled by default.

What It Does:

  • Deletes Saved Wireless Networks.
  • Requires Password Immediately After Sleep.
  • Turns On Firewall.
    • Enables Stealth Mode.
  • Disables Remote Login
  • Installs Needed System Updates.
    • Enables Automatic Updates
  • Validates System Integrity Protection is enabled.
  • Enables Full Disk Encryption.

Note: Script Will Prompt For Password If Not Root.


  • Review for your preferences and comment out options You don't want.
  • Set homessid and workssid variable to stop from deleting these!
  • Warning: This script does not ask before making changes.

To Run:

chmod +x

Important Notice

I likely don't know what I am doing, and this could be done faster, better and simpler some other way. These scripts could also break your MacBook and make you cry.