stronghold is the easiest way to securely configure your Mac.
Project description
stronghold is the easiest way to securely configure your Mac.
Designed for MacOS Sierra and High Sierra.
Previously fortify
Click for an asciicast demo!
Warnings
Ensure you have up-to-date backups. This script modifies system settings and there is always a possibility that it will damage your system.
Installation
$ pip install stronghold
Configuration Options
- Connectivity
- Enable Firewall? This helps protect your Mac from being attacked over the internet by viruses and worms.
Enable Logging? If there is an infection, logs are helpful for determining the source.
Enable Stealth Mode? If enabled, your Mac will not respond to network discovery attempts with ICMP ping requests, and will not answer connection attempts made from closed TCP and UDP networks.
Prevent both built-in and downloaded software from being whitelisted automatically?
Disable Captive Portal Assistant and force login through browser? With default Mac settings on an untrusted network, an attacker could trigger Captive Portal and direct you to a site with malware WITHOUT user interaction.
- User Metadata Storage
Clear language modeling data? This includes user spelling and suggestion data.
Clear QuickLook metadata?
- Clear SiriAnalytics database?
WARNING: This may kill Siri.
Clear Quarantine Data.
- General Safety
Lock Mac as soon as screen saver starts?
Display all file extensions? This prevents malware from disguising itself as another file type.
Disable saving documents to the cloud by default?
Show hidden files in Finder? This lets you see all files on the system without having to use the terminal.
Sources
How to Contribute
Clone repo and create a new branch: $ git checkout https://github.com/alichtman/stronghold -b [name_for_new_branch].
Make changes and test
Submit Pull Request with comprehensive description of changes
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distributions
Built Distribution
Hashes for stronghold-1.0.1-py2.py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | c368d37e498aa2452d8c16c78243a1105311f3bb76322b0f58e384f7ea12ddaf |
|
MD5 | 189f658cbe0759c34484251aae647db9 |
|
BLAKE2b-256 | 647945a75abd6451b8aa75ebf6809d84181c0b6eedf1963135323c36585775b3 |