OS Temper

Automatic Hardening and Tweaks for OS X

This script is an "all-in-one" solution for a large number of security fixes, recommended tweaks and first time setup for Mac OS X operating system. This has only been tested for OSX version 10.13.x

Screenshot

Running OS Temper

Requirements

Platform mac_os_x

OS Versions Supported 10.13.x

Quick Method

For quick setup and running based on the default configuration as per the current release in Github. If you would like to modify please feel free to fork and make any changes as needed. Open Terminal app and run:

curl -fsSL https://raw.githubusercontent.com/koconder/ostemper/master/ostemper.sh | sudo bash

Other Methods

If you have pulled the script down using Git you can run the script directly.

Auto-Harden

sudo ./ostemper.sh

Features and Functionality

Security

• Disabling a number of potentially insecure services
• Enabling firewalls and other essential security fixes
• Disabling crash reports and analytics collection where possible
• Enabling automatic updates
• Other privacy tweaks

Development

• Installing Xcode and Git
• Installing Homebrew
• Installing a number of commonly used fonts
• Common Bash and Terminal tweaks

Updates and Installs

• Running all required system updates
• Updating SSH configuration
• Common apps installed

Tweaks

• Finder tweaks

To-Do

A number of to-do's in progress:

• User creation for first-time setup
• Homebrew intergration
• Common app installation
• App and system updates
• Rules and configuration for commonly used apps
• Cleaning scripts to remove log's and trace files
• Bash profile and terminal tweaks
• Developer friendly setup for LAMP/LEMP, PHP, Python, Ruby, NodeJS
• VPN client installation
• Hardening of Chrome and Firefox

References and Sources

OS Temper is built upon the works and ideas from other scripts and community discussions, you can find a list of the sources below.

Automated Installs:

• github.com/Edditoria/dotfiles
• github.com/caskroom/homebrew-cask
• github.com/pablopunk/mac-fresh-install

System and Security Tweaks:

• github.com/nicolinuxfr/macOS-post-installation
• github.com/andrewparadi/.files
• github.com/karek314/macOS-home-call-drop
• cipherli.st
• gov.uk

Developer Friendly Tweaks:

• github.com/kiriaze/mac-dev-env
• github.com/filipmaelbrancke/mac-install
• github.com/jeremybradbury/mac-php-dev-env

OS Temper terminal logic and functionality:

• github.com/Winetricks/winetricks

Contributing and Donations

If you find something interesting or would like to contribute, please open issue and start disccussion. Feel free to fork and pull request. If this repo has helped you out feel free to donate via BTC/ETH or to the EFF

• BTC: 14v9knBDAmJAMxWovuLfy7YkLDyfq8phNb
• ETH: 0xe6fbd8de8157934767867022b7a8e8691d8df3dc
• EFF: (https://supporters.eff.org/donate/button)

License and Authors

Author: Vincent Koc (vincent@loophole.eu) Copyright: 2018, Vincent K.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at: http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

OSTemper logo based upon Fingerprint by LAFS from the Noun Project under Creative Commons licence 3.0: https://creativecommons.org/licenses/by/3.0/