Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

.osx: Tighten up security. #306

Closed
wants to merge 2 commits into
from

Conversation

Projects
None yet
4 participants
Contributor

ezhuk commented Dec 6, 2013

  • Enable Firewall (specific services, stealth mode, logging).
  • Disable IR remote control by default.
  • Optionally turn Bluetooth off (commented out by default).

ezhuk added some commits Dec 6, 2013

Tighten up security.
* Enable Firewall (specific services, stealth mode, logging).
* Disable IR remote control by default.
* Optionally turn Bluetooth off.

keith added a commit to keith/dotfiles that referenced this pull request Nov 3, 2014

dunn added a commit to dunn/mb-dotfiles that referenced this pull request Jun 20, 2015

Tatsh commented Jan 8, 2016

I know it's not much of a change, but I re-did your lines as a separate block and everything is made optional. Also added documentation link for stealth mode.

##############################################################################
# Security                                                                   #
##############################################################################

# Enable Firewall. Possible values: 0 = off, 1 = on for specific sevices, 2 =
# on for essential services.
#sudo defaults write /Library/Preferences/com.apple.alf globalstate -int 1

# Enable stealth mode
# https://support.apple.com/kb/PH18642
#sudo defaults write /Library/Preferences/com.apple.alf stealthenabled -int 1

# Enable firewall logging
#sudo defaults write /Library/Preferences/com.apple.alf loggingenabled -int 1

# Reload the firewall
# (uncomment if above is not commented out)
#launchctl unload /System/Library/LaunchAgents/com.apple.alf.useragent.plist
#sudo launchctl unload /System/Library/LaunchDaemons/com.apple.alf.agent.plist
#sudo launchctl load /System/Library/LaunchDaemons/com.apple.alf.agent.plist
#launchctl load /System/Library/LaunchAgents/com.apple.alf.useragent.plist

# Disable IR remote control
#sudo defaults write /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled -bool false

# Turn Bluetooth off completely
#sudo defaults write /Library/Preferences/com.apple.Bluetooth ControllerPowerState -int 0
#sudo launchctl unload /System/Library/LaunchDaemons/com.apple.blued.plist
#sudo launchctl load /System/Library/LaunchDaemons/com.apple.blued.plist

kdeldycke added a commit to kdeldycke/dotfiles that referenced this pull request Jan 8, 2016

Contributor

kdeldycke commented Dec 2, 2016

This PR has been superseded by #686 .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment