ebook ebooks e-book e-books downloaden bei MyEbooks.ch downloaden

Enterprise Mac Security: Mac OS X Snow Leopard

:	Charles Edge, William Barker, Beau Hunter, Gene Sullivan, Ken Barker
:	Enterprise Mac Security: Mac OS X Snow Leopard
:	Apress
:	9781430227311
:	2
:	CHF 35.50
:

:	Allgemeines, Lexika
:	English

:	648
:	Wasserzeichen/DRM
:	PC/MAC/eReader/Tablet
:	PDF

A common misconception in the Mac community is that Mac's operating system is more secure than others. While this might be true in certain cases, security on the Mac is still a crucial issue. When sharing is enabled or remote control applications are installed, Mac OS X faces a variety of security threats.

Enterprise Mac Security: Mac OS X Snow Leopard is a definitive, expert-driven update of the popular, slash-dotted first edition and was written in part as a companion to the SANS Institute course for Mac OS X. It contains detailed Mac OS X security information, and walkthroughs on securing systems, including the new Snow Leopard operating system.

Using the SANS Institute course as a sister, this book caters to both the beginning home user and the seasoned security professional not accustomed to the Mac, establishing best practices for Mac OS X for a wide audience.

The authors of this book are seasoned Mac and security professionals, having built many of the largest network infrastructures for Apple and spoken at both DEFCON and Black Hat on OS X security.

Charles Edge has been working with Apple products since he was a child. Professionally, Charles started with the Mac OS and Apple server offerings in 1999 after years working with various flavors of Unix. Charles began his consulting career working with Support Technologies and Andersen Consulting. In 2000, he found a new home at 318, Inc., a consulting firm in Santa Monica, California which is now the largest Mac consultancy in the country. At 318, Charles leads a team of over 40 engineers and has worked with network architecture, security and storage for various vertical and horizontal markets. Charles has spoken at a variety of conferences including DefCon, BlackHat, LinuxWorld, MacWorld and the WorldWide Developers Conference. Charles' first book, Mac Tiger Server Little Black Book, can be purchased through Paraglyph Press. Charles recently hung up his surfboard and moved to Minneapolis, Minnesota, with his wife, Lisa. Charles can be contacted at krypted@mac.com.

	Title Page	1
	Copyright Page	2
	Contents at a Glance	4
	Table of Contents	5
	About the Authors	15
	About the Technical Reviewer	16
	Acknowledgments	17
	Introduction	18
	Security Beginnings: Policies	18
	A Word About Network Images	19
	Risk Management	19
	How This Book Is Organized	20
	Part 1: The Big Picture	20
	Part 2: Securing the Ecosystem	21
	Part 3: Securing the Network	21
	Part 4: Securely Sharing Resources	22
	Part 5: Securing the Workplace	22
	Appendixes	23
	Part I The Big Picture	24
	Chapter 1 Security Quick-Start	25
	Securing the Mac OS X Defaults	25
	Customizing System Preferences	26
	Accounts	26
	Login Options	28
	Passwords	29
	Administrators	30
	Security Preferences	31
	General	31
	FileVault	33
	Firewall	35
	Software Update	36
	Bluetooth Security	38
	Printer Security	40
	Sharing Services	42
	Securely Erasing Disks	43
	Using Secure Empty Trash	45
	Using Encrypted Disk Images	46
	Securing Your Keychains	47
	Best Practices	49
	Chapter 2 Services, Daemons, and Processes	50
	Introduction to Services, Daemons, and Processes	50
	Viewing What s Currently Running	52
	The Activity Monitor	52
	The ps Command	56
	The top Output	57
	Viewing Which Daemons Are Running	59
	Viewing Which Services Are Available	60
	Stopping Services, Daemons, and Processes	61
	Stopping Processes	62
	Stopping Daemons	64
	Types of launchd Services	65
	GUI Tools for Managing launchd	65
	Changing What Runs At Login	66
	Validating the Authenticity of Applications and Services	67
	Summary	68
	Chapter 3 Securing User Accounts	69
	Introducing Identification, Authentication, and Authorization	69
	Managing User Accounts	70
	Introducing the Account Types	71
	Adding Users to Groups	73
	Enabling the Superuser Account	74
	Setting Up Parental Controls	76
	Managing the Rules Put in Place	82
	Advanced Settings in System Preferences	84
	Working with Local Directory Services	85
	Creating a Second Local Directory Node	88
	External Accounts	88
	Restricting Access with the Command Line: sudoers	89
	Securing Mount Points	94
	SUID Applications: Getting into the Nitty-Gritty	95
	Creating Files with Permissions	97
	Summary	98
	Chapter 4 File System Permissions	99
	Mac OS File Permissions: A Brief History of Time	100
	POSIX Permissions	101
	Modes in Detail	102
	Inheritance	104
	The Sticky Bit	107
	The suid/sguid Bits	107
	POSIX in Practice	108
	Access Control Lists	111
	Access Control Entries	111
	Administration	111
	Read Permissions	112
	Write Permissions	112
	Inheritance	113
	Effective Permissions	114
	ACLs in Practice	115
	Administering Permissions	117
	Using the Finder to Manage Permissions	123
	Using chown and chmod to Manage Permissions	124
	The Hard Link Dilemma	127
	Using mtree to Audit File system Permissions	129
	Summary	131
	Chapter 5 Reviewing Logs and Monitoring	132
	What Exactly Gets Logged?	132
	Using Console	134
	Viewing Logs	134
	Marking Logs	135
	Searching Logs	136
	Finding Logs	137
	Secure.log: Security Information 101	138
	appfirewall.log	139
	Reviewing User-Specific Logs	140
	Reviewing Command-Line Logs	142
	Reviewing Library Logs	143
	Breaking Down Maintenance Logs	143
	daily.out	145
	Yasu	146
	Weekly.out	147
	Monthly.out	148
	What to Worry About	148
	Virtual Machine and Bootcamp Logs	149
	Event Viewer	149
	Task Manager	150
	Performance Alerts	151
	Review Regularly, Review Often	152
	Accountability	152
	Incident Response	153
	Summary	154
	Part II Securing the Ecosystem	155
	Chapter 6 Application Signing and Sandbox	156
	Application Signing	156
	Application Authentication	158
	Application Integrity	160
	Signature Enforcement in OS X	161
	Keychain Access	162
	The OS X Application Firewall	164
	Client Management MCX and Parental Controls	166
	Signing and Verifying Applications