PaulDotCom mailing list archives

Re: hardening Mac OS X | security tools for OS X


From: Dan Burrowes <danburrowes () gmail com>
Date: Tue, 14 Sep 2010 09:47:25 +0900

On 9/14/10 2:41 AM, Sven Aluoor wrote:
What other tools to consider? What do you use on OS X?

Check out the benchmarks available for free download from the Center for
Internet Security:
http://cisecurity.org/en-us/?route=downloads.benchmarks


Also, Bastille runs on Mac OS X:
http://bastille-linux.sourceforge.net/


If you're not comfortable tuning the ipfw firewall manually, check out
WaterRoof:
http://www.hanynet.com/waterroof/


Last (yet should probably be first), three words: log, log, and log.
Set up logging to a central syslog server.  Basic *nix command line
skills combined with a few automated shells scrips will bring you very
far indeed.  If you want pretty graphs and layout, install Splunk
(though it's overkill for a single host):
http://www.splunk.com/

--dan
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com


Current thread: