Maintaining Mac OSX Security
Mac OS X is a relatively secure operating system. File sharing services are turned off by default, and only the ports necessary for network connectivity remain open. The root account is disabled and inaccessible. All system-level modifications require an administrator’s password.
Checking for Security Updates on Mac OS
- Log into the computer as the administrator.
- Under the Apple menu, select System Preferences.
- In the System section, select Software Update.
- Click Check Now. A list of available updates will display. Note: ITS recommends that you configure Software Update to automatically check for updates.
- Choose the updates you would like to install.
Note: You may need to restart your computer in order for the security update to take effect.
Keeping Your Mac Secure through User Accounts
You will have two options when creating user accounts: administrator or standard. You can improve the security of your computer by limiting your use of your administrative accounts. Administrators can modify system services and files, as well as files owned by other users. Standard, or regular, users can only modify files located in their home directory.
When you launch Mac OS X for the first time, the first account you will need to create is an administrator’s account. You should use the administrator account only to install system-wide applications and to apply operating system patches. For daily use, create and use standard accounts. This way, should you accidentally infect your machine or download malware, only the standard account in use at that time will be affected.
Note: You should configure your user account so that a password is required when you log in. If you choose the automatic login feature, you will compromise the security of your personal information, since anyone with physical access to your machine can access your files.
File Sharing and Remote Login
In the Mac OS X, file-sharing services are turned off by default. You can turn these services on in the Sharing system preference panel. Possibilities include file sharing via AFP, SAMBA, and FTP. You can also enable Remote Login, which starts up the Open SSH service. This allows you to log into the computer from another computer and control it via the command line. APACH web services and Printer Sharing are also available options.
Use caution before enabling file-sharing services, since networked computers are open to potential security breaches.
Creating a Standard Account
- Log into the computer as the administrator.
- Under the Apple menu, select System Preferences
- In the System section, select Accounts.
- Click the Plus Sign in the lower left-hand corner of the Accounts panel.
- In the Name field, type the account owner’s full name.
- In the Short Name field, type the username for the account.
- In the Password field, type the password you want to use for the account. (See the Security Overview page for more information on creating secure passwords.)
- In the Verify field, re-enter the password. Note: You can enter a clue to your password in the Password Hint field; however, this may leave your password less secure by making it easier to guess.
- Close the Accounts panel. Click Yes to turn off automatic login.
- If you need to create another account click on the + above the lock and below the Login Options
- Under New Account you can select standard account, Administrator and Sharing only. Always make sure you create two accounts. One Administrator account for installing updates and software. Second account to use on a daily basis so you wont affect the systems performance and or software.
- Enter your full name, account name can be shorten such as username.
Ex: Full Name: John Doe
Account Name: username
Password: Create a password like your USC password. 7-8 Characters with
Numbers, uppercase and lowercase.
Now you are ready to login to your new account by either logging out of your current account or by restarting your computer.
