Securely configure your Mac from the terminal.
Project description
stronghold
stronghold
is the easiest way to securely configure your Mac.
Designed for MacOS Sierra and High Sierra.
Previously fortify
.
stronghold
is featured on these lists!
- awesome-cli-apps
- awesome-mac
- open-source-mac-os-apps
- osx-and-ios-security-awesome
- python-macadmin-tools
- tools-osx
Usage
Usage: stronghold.py [OPTIONS]
Securely configure your Mac.
Developed by Aaron Lichtman -> (Github: alichtman)
Options:
-lockdown Set secure configuration without user interaction.
-info Display version and author information and exit.
-help, -h Show this message and exit.
Installation Options
-
Install with
pip
$ pip install stronghold
$ stronghold
-
Download the
stronghold
binary from Releases tab.
Configuration Options
-
Connectivity
- Enable Firewall? This helps protect your Mac from being attacked over the internet by viruses and worms.
- Enable Logging? If there is an infection, logs are helpful for determining the source.
- Enable Stealth Mode? If enabled, your Mac will not respond to network discovery attempts with ICMP ping requests, and will not answer connection attempts made from closed TCP and UDP networks.
- Enable Firewall? This helps protect your Mac from being attacked over the internet by viruses and worms.
-
System Protection
- Enable Gatekeeper? Protect against malware by enforcing code signing and verifying downloaded applications before letting them to run.
- Disable Captive Portal Assistant and force login through browser? With default Mac settings on an untrusted network, an attacker could trigger Captive Portal and direct you to a site with malware WITHOUT user interaction.
- Prevent automatic software whitelisting?
-
User Metadata Storage
- Clear language modeling data? This includes user spelling and suggestion data.
- Clear QuickLook metadata?
- Clear SiriAnalytics database?
- WARNING: This may kill Siri.
- Clear Quarantine Data.
-
General Safety
- Lock Mac as soon as screen saver starts?
- Display all file extensions? This prevents malware from disguising itself as another file type.
- Disable saving documents to the cloud by default?
- Show hidden files in Finder? This lets you see all files on the system without having to use the terminal.
Sources
- https://github.com/drduh/macOS-Security-and-Privacy-Guide
- http://newosxbook.com/files/moxii3/AppendixA.pdf
- https://pleiades.ucsc.edu/hyades/PF_on_Mac_OS_X
How to Contribute
- Clone repo and create a new branch:
$ git checkout https://github.com/alichtman/stronghold -b name_for_new_branch
. - Make changes and test
- Submit Pull Request with comprehensive description of changes
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distributions
No source distribution files available for this release.See tutorial on generating distribution archives.
Built Distribution
Close
Hashes for stronghold-1.1.3-py2.py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 3c41d494d5bd3cd2710876355e6b13423c52154d7f25d868f3648bfcd0e3ac92 |
|
MD5 | 3bbb02527af2cd0cc920e7da9ee19844 |
|
BLAKE2b-256 | ae1814893b26f649f17760a34e78cdc54924aa8342d14b99a169e5a89a6b9d56 |