Mac OS X Security Configuration for Version 10.5 Leopard

Total Page:16

File Type:pdf, Size:1020Kb

Mac OS X Security Configuration for Version 10.5 Leopard Mac OS X Security Configuration For Version 10.5 Leopard K Apple Inc. Adobe and PostScript are trademarks of Adobe Systems © 2008 Apple Inc. All rights reserved. Incorporated. The owner or authorized user of a valid copy of The Bluetooth® word mark and logos are registered Mac OS X software may reproduce this publication for trademarks owned by Bluetooth SIG, Inc. and any use of the purpose of learning to use such software. No part of such marks by Apple is under license. this publication may be reproduced or transmitted for commercial purposes, such as selling copies of this Intel, Intel Core, and Xeon are trademarks of Intel Corp. publication or for providing paid-for support services. in the U.S. and other countries. Every effort has been made to ensure that the Java™ and all Java-based trademarks and logos are information in this manual is accurate. Apple is not trademarks or registered trademarks of Sun responsible for printing or clerical errors. Microsystems, Inc. in the U.S. and other countries. Apple PowerPC™ and the PowerPC logo™ are trademarks of 1 Infinite Loop International Business Machines Corporation, used Cupertino, CA 95014-2084 under license therefrom. 408-996-1010 UNIX is a registered trademark of The Open Group. www.apple.com X Window System is a trademark of the Massachusetts The Apple logo is a trademark of Apple Inc., registered Institute of Technology in the U.S. and other countries. Use of the “keyboard” Apple logo (Option-Shift-K) for commercial purposes This product includes software developed by the without the prior written consent of Apple may University of California, Berkeley, FreeBSD, Inc., The constitute trademark infringement and unfair NetBSD Foundation, Inc., and their respective competition in violation of federal and state laws. contributors. Apple, the Apple logo, AirPort, AppleScript, AppleShare, Other company and product names mentioned herein AppleTalk, Bonjour, Boot Camp, ColorSync, Exposé, are trademarks of their respective companies. Mention FileVault, FireWire, iCal, iChat, iMac, iSight, iTunes, of third-party products is for informational purposes Keychain, Leopard, Mac, Mac Book, Macintosh, Mac OS, only and constitutes neither an endorsement nor a QuickTime, Safari, Xgrid, Xsan, and Xserve are recommendation. Apple assumes no responsibility with trademarks of Apple Inc., registered in the U.S. and other regard to the performance or use of these products. countries. 019-1255/2008-05-19 Apple Remote Desktop, Finder, MacBook Air, QuickTime Broadcaster, Spotlight, and Time Machine are trademarks of Apple Inc. .Mac is a service mark of Apple Inc., registered in the U.S. and other countries. 1 Contents Preface 11 About This Guide 11 Target Audience 11 What’s New in Version 10.5 12 What’s in This Guide 13 Using This Guide 13 Using Onscreen Help 13 Mac Help 14 The Mac OS X Server Administration Guides 15 Viewing PDF Guides on Screen 15 Printing PDF Guides 15 Getting Documentation Updates 16 Getting Additional Information 17 Acknowledgments Chapter 1 19 Introduction to Mac OS X Security Architecture 20 Security Architectural Overview 20 UNIX Infrastructure 20 Access Permissions 20 Security Framework 21 Layered Security Defense 22 Mandatory Access Controls 22 Credential Management 22 Network Security 22 Public Key Infrastructure (PKI) 23 Authorization Versus Authentication 23 Security Features in Mac OS X v10.5 23 Mandatory Access Controls 24 Sandboxing Processes 25 Parental Controls 25 Quarantine Applications 25 Application-Based Firewall 26 Signed Applications 26 Smart Card Unlock of FileVault and Encrypted Storage 3 27 Sharing and Collaboration Services 27 Enhanced Encrypted Disk Image Cryptography 28 Enhanced VPN Compatibility and Integration 28 Improved Secure Connectivity Chapter 2 29 Installing Mac OS X 29 System Installation Overview 29 Disabling the Firmware Password 30 Installing from DVD 31 Installing from the Network 31 Restoring from Preconfigured Disk Images 31 Initial System Setup 32 Using Setup Assistant 32 Creating Initial System Accounts 33 Setting Correct Time Settings 33 Updating System Software 34 Updating from an Internal Software Update Server 35 Updating from Internet Software Update Servers 36 Updating Manually from Installer Packages 37 Verifying the Integrity of Software 37 Repairing Disk Permissions 38 POSIX Permissions Overview 38 ACL Permissions Overview 38 Using Disk Utility to Repair Disk Permissions Chapter 3 41 Protecting System Hardware 41 Protecting Hardware 42 Preventing RF Eavesdropping 42 Understanding RF Security Challenges 43 OS Components 43 Removing Wi-Fi Support Software 44 Removing Bluetooth Support Software 45 Preventing Unauthorized Recording 45 Removing Audio Recording Support Software 46 Removing Video Recording Support Software 47 Preventing Data Port Access 47 Removing USB Support Software 48 Removing FireWire Support Software 49 System Hardware Modifications 49 Authorized AppleCare Certified Technicians Chapter 4 51 Securing Global System Settings 51 Securing System Startup 4 Contents 52 PowerPC-Based Systems 52 Using the Firmware Password Utility 53 Configuring Open Firmware Settings 54 Using Command-Line Tools for Secure Startup 54 Intel-Based Systems 55 Configuring Access Warnings 55 Enabling Access Warnings for the Login Window 56 Understanding the AuthPlugin Architecture 57 Understanding the BannerSample Project 57 Enabling Access Warnings for the Command Line Chapter 5 59 Securing Accounts 59 Types of User Accounts 60 Guidelines for Creating Accounts 60 Defining User IDs 61 Securing the Guest Account 62 Securing Nonadministrator Accounts 62 Controlling Local Accounts with Parental Controls 64 Securing External Accounts 64 Protecting Data on External Volumes 64 Securing Directory-Based Accounts 65 Securing Administrator Accounts 65 Securing the System Administrator Account 67 Understanding Directory Domains 68 Understanding Network Services, Authentication, and Contacts 69 Configuring LDAPv3 Access 69 Configuring Active Directory Access 70 Using Strong Authentication 70 Using Passwords 71 Using Kerberos 72 Using Smart Cards 73 Using Tokens 73 Using Biometrics 74 Setting Global Password Policies 74 Storing Credentials 75 Using the Default User Keychain 76 Creating Additional Keychains 77 Securing Keychains and Their Items 78 Using Smart Cards as Keychains 79 Using Portable and Network-Based Keychains Chapter 6 81 Securing System Preferences 81 System Preferences Overview Contents 5 83 Securing .Mac Preferences 85 Securing Accounts Preferences 88 Securing Appearance Preferences 89 Securing Bluetooth Preferences 90 Securing CDs & DVDs Preferences 91 Securing Date & Time Preferences 93 Securing Desktop & Screen Saver Preferences 95 Securing Display Preferences 95 Securing Dock Preferences 96 Securing Energy Saver Preferences 98 Securing Exposé & Spaces Preferences 99 Securing International Preferences 99 Securing Keyboard & Mouse Preferences 100 Securing Network Preferences 101 Securing Parental Control Preferences 104 Securing Print & Fax Preferences 106 Securing QuickTime Preferences 107 Securing Security Preferences 108 General Security 109 FileVault Security 110 Firewall Security 112 Securing Sharing Preferences 114 Securing Software Update Preferences 115 Securing Sound Preferences 116 Securing Speech Preferences 118 Securing Spotlight Preferences 120 Securing Startup Disk Preferences 121 Securing Time Machine Preferences 122 Securing Universal Access Preferences Chapter 7 123 Securing Data and Using Encryption 123 Understanding Permissions 124 Setting POSIX Permissions 124 Viewing POSIX Permissions 125 Interpreting POSIX Permissions 126 Modifying POSIX Permissions 126 Setting File and Folder Flags 126 Viewing Flags 126 Modifying Flags 127 Setting ACL Permissions 127 Modifying ACL Permissions 128 Setting Global File Permissions 129 Securing User Home Folders 6 Contents 130 Encrypting Home Folders 131 Overview of FileVault 132 Managing FileVault 132 Managing the FileVault Master Keychain 134 Encrypting Portable Files 134 Creating an Encrypted Disk Image 135 Creating an Encrypted Disk Image from Existing Data 136 Creating Encrypted PDFs 136 Securely Erasing Data 137 Configuring Finder to Always Securely Erase 137 Using Disk Utility to Securely Erase a Disk or Partition 138 Using Command-Line Tools to Securely Erase Files 139 Using Secure Empty Trash 139 Using Disk Utility to Securely Erase Free Space 139 Using Command-Line Tools to Securely Erase Free Space Chapter 8 141 Securing System Swap and Hibernation Storage 141 System Swap File Overview 142 Encrypting System Swap Chapter 9 143 Avoiding Multiple Simultaneous Account Access 143 Avoiding Fast User Switching Chapter 10 145 Ensuring Data Integrity with Backups 145 Understanding the Time Machine Architecture 145 Deleting Permanently from Time Machine backups 146 Storing Backups Inside Secure Storage 146 Restoring Backups from Secure Storage Chapter 11 147 Information Assurance with Applications 147 Protecting Data While Using Apple Applications 147 Mail Security 148 Enabling Account Security 149 Signing and Encrypting Mail Messages 150 Web Browsing Security with Safari 151 Verifying Server Identity 152 Client-Side Authentication 152 Managing Data Communication and Execution 152 Opening Safe Files 153 Nonsecure Forms 154 Syncing Bookmarks 154 AutoFill 155 Controlling Web Content 155 Cookie Storage or Tracking Information Contents 7 156 Proxies 156 Securing File Downloads 156 Instant Message Security with iChat AV 157 iChat AV Security 158 Enabling Privacy 158 Enabling Encryption
Recommended publications
  • Dropdmg 3.6.2 Manual
    DropDMG 3.6.2 Manual C-Command Software c-command.com February 16, 2021 Contents 1 Introduction 4 1.1 Feature List..............................................4 2 Installing and Updating 6 2.1 Requirements.............................................6 2.2 Installing DropDMG.........................................7 2.3 Updating From a Previous Version.................................7 2.4 Reinstalling a Fresh Copy......................................8 2.5 Uninstalling DropDMG.......................................9 2.6 Security & Privacy Access......................................9 3 Using DropDMG 13 3.1 Basics................................................. 13 3.2 Making a Bootable Device Image of a Hard Drive......................... 14 3.3 Backing Up Your Files to CD/DVD................................ 16 3.4 Burning Backups of CDs/DVDs................................... 17 3.5 Restoring Files and Disks...................................... 18 3.6 Making Images With Background Pictures............................. 19 3.7 Protecting Your Files With Encryption............................... 20 3.8 Transferring Files Securely...................................... 21 3.9 Sharing Licenses and Layouts.................................... 21 3.10 Splitting a File or Folder Into Pieces................................ 22 3.11 Creating a DropDMG Quick Action................................ 22 4 Menus 23 4.1 The DropDMG Menu........................................ 23 4.1.1 About DropDMG...................................... 23 4.1.2 Software
    [Show full text]
  • The Apple Ecosystem
    APPENDIX A The Apple Ecosystem There are a lot of applications used to manage Apple devices in one way or another. Additionally, here’s a list of tools, sorted alphabetically per category in order to remain vendor agnostic. Antivirus Solutions for scanning Macs for viruses and other malware. • AVG: Basic antivirus and spyware detection and remediation. • Avast: Centralized antivirus with a cloud console for tracking incidents and device status. • Avira: Antivirus and a browser extension. Avira Connect allows you to view device status online. • BitDefender: Antivirus and malware managed from a central console. • CarbonBlack: Antivirus and Application Control. • Cylance: Ransomware, advanced threats, fileless malware, and malicious documents in addition to standard antivirus. • Kaspersky: Antivirus with a centralized cloud dashboard to track device status. © Charles Edge and Rich Trouton 2020 707 C. Edge and R. Trouton, Apple Device Management, https://doi.org/10.1007/978-1-4842-5388-5 APPENDIX A THe AppLe ECOSYSteM • Malware Bytes: Antivirus and malware managed from a central console. • McAfee Endpoint Security: Antivirus and advanced threat management with a centralized server to track devices. • Sophos: Antivirus and malware managed from a central console. • Symantec Mobile Device Management: Antivirus and malware managed from a central console. • Trend Micro Endpoint Security: Application whitelisting, antivirus, and ransomware protection in a centralized console. • Wandera: Malicious hot-spot monitoring, jailbreak detection, web gateway for mobile threat detection that integrates with common MDM solutions. Automation Tools Scripty tools used to automate management on the Mac • AutoCasperNBI: Automates the creation of NetBoot Images (read: NBI’s) for use with Casper Imaging. • AutoDMG: Takes a macOS installer (10.10 or newer) and builds a system image suitable for deployment with Imagr, DeployStudio, LANrev, Jamf Pro, and other asr or Apple Systems Restore-based imaging tools.
    [Show full text]
  • 1 Welcome to the Superduper!
    Welcome to the SuperDuper! User’s Guide! This guide is designed to get you up and running as fast as possible. We’ve taken the most common tasks people perform with SuperDuper!, each placed in its own chapter, and have provided step-by-step guidance (including lots of pictures). In here you’ll find out how to: • Back up your Macintosh for the first time • Update an existing backup • Schedule one or multiple backups • Store a backup alongside other files on a destination drive • Back up your Macintosh over a network • Exclude a folder from a backup • Restore files from a backup • Restore an entire drive in an emergency situation • Troubleshooting We’ve also included a complete program reference, and some more advanced topics, such as: • Creating a Sandbox • Maintaining a Sandbox • Applying (and recovering from) System Updates while running from a Sandbox Note that SuperDuper operates in two different “modes” – registered and unregistered. The unregistered version allows easy, complete and user- specific backup clones to partitions, FireWire drives, and image files. 1 Once registered, SuperDuper allows you to schedule backups, quickly update backups with Smart Update (saving a lot of time), select “copy modes” other than Erase, then copy, create Sandboxes, fully customize the copying process using its unique Copy Scripts, save and restore settings, and avoid authenticating every time you copy. And, on top of that, it allows us to eat. Disclaimer Although SuperDuper! has been carefully tested, and should perform its functions without data loss, you use this software at your own risk and without any warranty.
    [Show full text]
  • Mac OS X Server Introduction to Command-Line Administration Version 10.6 Snow Leopard Kkapple Inc
    Mac OS X Server Introduction to Command-Line Administration Version 10.6 Snow Leopard K Apple Inc. Apple Remote Desktop, Finder, and Snow Leopard are © 2009 Apple Inc. All rights reserved. trademarks of Apple Inc. Under the copyright laws, this manual may not AIX is a trademark of IBM Corp., registered in the U.S. be copied, in whole or in part, without the written and other countries, and is being used under license. consent of Apple. The Bluetooth® word mark and logos are registered The Apple logo is a trademark of Apple Inc., registered trademarks owned by Bluetooth SIG, Inc. and any use in the U.S. and other countries. Use of the “keyboard” of such marks by Apple is under license. Apple logo (Option-Shift-K) for commercial purposes without the prior written consent of Apple may This product includes software developed by the constitute trademark infringement and unfair University of California, Berkeley, FreeBSD, Inc., competition in violation of federal and state laws. The NetBSD Foundation, Inc., and their respective contributors. Every effort has been made to ensure that the information in this manual is accurate. Apple is not Java™ and all Java-based trademarks and logos responsible for printing or clerical errors. are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. Apple 1 Infinite Loop PowerPC™ and the PowerPC logo™ are trademarks Cupertino, CA 95014 of International Business Machines Corporation, used 408-996-1010 under license therefrom. www.apple.com UNIX® is a registered trademark of The Open Group. Apple, the Apple logo, AppleScript, FireWire, Keychain, Other company and product names mentioned herein Leopard, Mac, Mac OS, Quartz, Safari, Xcode, Xgrid, and are trademarks of their respective companies.
    [Show full text]
  • Pdfnews 17/08
    Precursor PDF News 17:08 Mac OS X 10.2.5 This version offers bug fixes, (the 1970 date bug is fixed!) security patches and feature improve- ments too numerous to name here. Available from the software update mechanism or as a download (below). Caution: some users report having kernel panics when USB hubs are attached. Mac OS X 10.2.5 Update http://docs.info.apple.com/article.html?artnum=120210 Mac OS X 10.2.5 Combo Update http://docs.info.apple.com/article.html?artnum=120211 Mac OS X 10.2 – Precursor Price $199 CDN Support your local consultant ! shop at: http://software.precursor.ca Mac OS X Server 10.2.5 The 10.2.5 Server Update delivers enhanced functionality and improved reliability to the following applications, services and technologies: Mac OS Extended (HFS+) journaling, software RAID, Fibre Channel and SCSI device compatibility, IP networking, AFP, SMB, NFS and FTP file services, Print services, Apache 2, Apache Axis, MySQL, WebMail, Mail services, QuickTime Streaming Server, DHCP, Open Directory, NetBoot, Network Install, Workgroup Manager, Net- work Image Utility, Macintosh Manager and Apple Software Restore. Available from the software update mechanism Mac OS X Server 10.2(10 user license) – Precursor Price $749 CDN Support your local consultant ! shop at: http://software.precursor.ca Apple Safari public beta 2 Apple’s excellent free browser Safari Public Beta 2 now offers tabbed browsing, autofill forms & passwords, privacy “reset”, import of Netscape and Mozilla bookmarks, increased standards compatibility, and improved AppleScript support.. http://www.apple.com/ca/safari/ StuffIt Deluxe & Standard 7.0.3 Aladdin offers a variety of improvements in version 7.03 for both StuffIt Deluxe and StuffIt Standard Edition.
    [Show full text]
  • Deployment: We Need to Talk
    Deployment: We Need To Talk Anthony Reimer AnthonyReimer jazzace jazzace Inventors Self-sufficient Diverse Needs Community Terminology Thin Imaging Thin Imaging is when you… 1. Erase boot volume, apply a known good OS via a minimal disk image, then apply settings, configurations, and applications on top 2. Same as 1, except install the OS directly rather than use a disk image 3. Apply settings, configurations, and applications on top of a known good OS (e.g., OS applied at the factory) 1 & 2 3 Customizing Customizing 1. Imaging or 2. Installing OS ? Unknown Known Desired Known Desired • Jamf APFS White Paper (registration required), 2017 ‣ www.jamf.com/resources/white-papers/everything-you-need-to-know-about-apple-file-system-apfs/ • Imaging will be dead (soon-ish) — Rich Trouton, 2017 ‣ derflounder.wordpress.com/2017/01/10/imaging-will-be-dead-soon-ish/ • Managing OS X blog — Greg Neagle, 2017 ‣ managingosx.wordpress.com • Deployment: A Pedagogical Manifest(o) — Me, 2013 ‣ www.afp548.com/2013/05/21/deployment-a-pedagogical-manifesto/ • Deployment Workflows — Duncan McCracken, 2013 ‣ MacSysAdmin Conference; http://docs.macsysadmin.se/2013/pdf/DeploymentWorkflows.pdf • DeployStudio: Tips, Tricks, and Alternate Uses — Rusty Myers, Brandon Penglase ‣ Macworld Conference 2011 (no public source) 1 2 3 Jamf APFS Modular Imaging?, Thin Imaging, Modular Imaging 2017 Re-provisioning Provisioning Trouton 2017 Modular Imaging Thin Imaging Thin Imaging Installation-based Installation-based Neagle 2017 (Imaging) workflow workflow Minimal Common Customize Only, Reimer 2013 Erase and Install Image Deployment Install Only McCracken Thin Imaging (not specified) No Imaging 2013 Penglase, Thin Imaging Thin Imaging Thin Imaging Myers 2011 Monolithic Modular Imaging Deployment Workflow monolithic adjective formed of a single large block of stone: later Byzantine columns were monolithic and usually made of marble.
    [Show full text]
  • PSUMAC203: Deployment Getting Tired of Us Yet?
    PSUMAC203: Deployment Getting Tired of us yet? • Justin Elliott, Penn State University • IT Manager, Classroom and Lab Computing • Rusty Myers, Penn State University • IT Support Specialist, College of Education Overview • What is Deployment • Deployment Methods • Deployment Tools • Demo Time Quick Audience Survey • New to Deployment for Macs? • How many Macs do you need to image? • Have more than 1 network segment? • Have Mac OS X Server(s)? • Have Windows (SMB) Servers? Deployment System Image System Image Deploying System Images! Considerations • Frequency of Imaging • Amount of Data to Restore • Number of Macs to Image • Number of Staff • Budgetary Restrictions Booting Methods Local Disk Booting • Local Volumes • DVDs - Cheap, Slow • FireWire, USB Hard Drives • Fast • Relatively Inexpensive Network Booting • Network (NetBoot) • Requires fast switched networks, DHCP, Local NetBoot Server or router HelperIPs • Very convenient when it all works correctly • Sometimes difficult network requirements Image Sources Local Image Sources • Second Partition • Firewire, USB Drives • Great for larger images • Hassle to manage portable disks Network Image Sources • Network Shares • AFP, SMB, HTTP • ASR Multicast Server Prep for HTTP • Segment images served by Apache (before version 2.0) Web Server $ hdiutil segment -segmentSize 1.9g -o Image.dmg • Keep all of the .dmgpart files in the same directory Prep for ASR Multicast • Images must be “Scanned For Restore” • Re-orders and optimizes image for multicast • Images should not be compressed Deployment Tools Apple Software Restore • ASR is at the heart of all OS X system restore utilities • Disk Utility, System Image Utility • Blast Image Config, DeployStudio • Can be scripted at the command line too • Located at /usr/sbin/asr Multicast ASR Server • ASR can run as a multicast server for one image • Start asr with server mode, config, image path % asr server --source master.dmg --config configuration.plist • Can literally kill your networks.
    [Show full text]
  • CIS Mac OS X Leopard (10.5.X) Benchmark
    Mac OS X 10.5 Leopard Level 1 & 2 Benchmark Version 1.0 May 2008 Copyright ©2008, The Center for Internet Security http://www.cisecurity.org Editor: Allan Marcus [email protected] CIS Mac OS X Leopard (10.5.x) Benchmark Table of Contents Terms of Use Agreement ........................................................................................................................... 3 1) Introduction ........................................................................................................................................ 6 1.1) Document Layout ....................................................................................................................... 6 1.2) Intended Audience ..................................................................................................................... 6 1.3) Practical Application .................................................................................................................. 7 1.4) Security Levels Explained ......................................................................................................... 7 1.5) Precursor Technical Information ............................................................................................... 7 1.6) Basic Security Principles: .......................................................................................................... 8 2) Benchmark Elements ......................................................................................................................... 9 2.1) Installation
    [Show full text]
  • Guide to Securing Apple OS X 10.10 Systems for IT Professionals: a NIST Security Configuration Checklist
    NIST Special Publication 800-179 Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist Lee Badger Murugiah Souppaya Mark Trapnell Eric Trapnell Dylan Yaga Karen Scarfone This publication is available free of charge from: https://doi.org/10.6028/NIST.SP.800-179 C O M P U T E R S E C U R I T Y NIST Special Publication 800-179 Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist Lee Badger Murugiah Souppaya Mark Trapnell Dylan Yaga Computer Security Division Information Technology Laboratory Eric Trapnell Software and Systems Division Information Technology Laboratory Karen Scarfone Scarfone Cybersecurity Clifton, VA This publication is available free of charge from: https://doi.org/10.6028/NIST.SP.800-179 December 2016 U.S. Department of Commerce Penny Pritzker, Secretary National Institute of Standards and Technology Willie May, Under Secretary of Commerce for Standards and Technology and Director Authority This publication has been developed by NIST in accordance with its statutory responsibilities under the Federal Information Security Modernization Act (FISMA) of 2014, 44 U.S.C. § 3551 et seq., Public Law (P.L.) 113-283. NIST is responsible for developing information security standards and guidelines, including minimum requirements for federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate federal officials exercising policy authority over such systems. This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130.
    [Show full text]
  • Mac in the Enterprise IT Configuration Guide for Your Mac Evaluation and Deployment
    SAMPLE PAGES Mac in the Enterprise IT Configuration Guide For Your Mac Evaluation and Deployment (Version 5.0) IT Configuration Guide—For Your Mac Evaluation and Deployment (Version 5.0) SAMPLE PAGES Table of Contents Introduction .......................................................................................1 1 Imaging ..................................................................................2 1.1 Imaging Mac Computers ............................................................................................2 1.2 Creating Packages ..........................................................................................................3 1.2.1 Creating Packages with PackageMaker ................................................................4 1.2.1.1 Creating a Snapshot Package with PackageMaker ........................................10 1.2.2 Creating Packages Using Third-Party Utilities ..................................................16 1.3 Creating Images with System Image Utility .....................................................17 1.3.1 NetInstall from Installer .............................................................................................18 1.3.2 NetRestore from Installer .........................................................................................21 1.3.3 Using NetRestore from a Prepared Volume ......................................................24 1.3.4 Creating NetRestore NetBoot Sets .......................................................................27 1.3.5 Automations
    [Show full text]
  • Mac OS X Server Deploying Mac OS X Computers for K–12 Education for Version 10.4 Or Later
    Mac OS X Server Deploying Mac OS X Computers for K–12 Education For Version 10.4 or Later Apple Computer, Inc. © 2005 Apple Computer, Inc. All rights reserved. The owner or authorized user of a valid copy of Mac OS X Server software may reproduce this publication for the purpose of learning to use such software. No part of this publication may be reproduced or transmitted for commercial purposes, such as selling copies of this publication or for providing paid-for support services. Every effort has been made to ensure that the information in this manual is accurate. Apple Computer, Inc., is not responsible for printing or clerical errors. Apple 1 Infinite Loop Cupertino CA 95014-2084 www.apple.com The Apple logo is a trademark of Apple Computer, Inc., registered in the U.S. and other countries. Use of the “keyboard” Apple logo (Option-Shift-K) for commercial purposes without the prior written consent of Apple may constitute trademark infringement and unfair competition in violation of federal and state laws. Apple, the Apple logo, AppleTalk, Mac, and Macintosh are trademarks of Apple Computer, Inc., registered in the U.S. and other countries. Finder is a trademark of Apple Computer, Inc. Other company and product names mentioned herein are trademarks of their respective companies. Mention of third-party products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the performance or use of these products. 019-0545/10-03-2005 1 Contents 5 Deploying
    [Show full text]
  • Mac OS X Security Configuration for Version 10.4 Or Later Second Edition
    Mac OS X Security Configuration For Version 10.4 or Later Second Edition K Apple Inc. Apple, the Apple logo, AirPort, FireWire, Keychain, Mac, © 2007 Apple Inc. All rights reserved. Macintosh, the Mac logo, Mac OS, QuickTime, and Xserve are trademarks of Apple Inc., registered in the The owner or authorized user of a valid copy of U.S. and other countries. Apple Remote Desktop, Finder, Mac OS X software may reproduce this publication for and Xgrid are trademarks of Apple Inc. the purpose of learning to use such software. No part of this publication may be reproduced or transmitted for The Bluetooth® word mark and logos are owned by commercial purposes, such as selling copies of this the Bluetooth SIG, Inc. and any use of such marks by publication or for providing paid-for support services. Apple Inc. is under license. Every effort has been made to ensure that the UNIX is a registered trademark in the United States information in this manual is accurate. Apple is not and other countries, licensed exclusively through responsible for printing or clerical errors. X/Open Company, Ltd. Apple Other company and product names mentioned herein 1 Infinite Loop are trademarks of their respective companies. Mention Cupertino, CA 95014-2084 of third-party products is for informational purposes 408-996-1010 only and constitutes neither an endorsement nor a www.apple.com recommendation. Apple assumes no responsibility with regard to the performance or use of these products. The Apple logo is a trademark of Apple Inc., registered in the U.S. and other countries.
    [Show full text]