The purpose of this guide is to provide an overview of Mac OS X v10.3.x “Panther” operating system security and recommendations for configuring the security features. This guide provides recommended settings to secure systems using this operating system, and points out problems that could cause security concerns in systems using this operating system.

This document consists of six chapters and two appendices:

Chapter 1, “Scope of Guidance,” contains an overview of the type of system for which this guidance is intended.

Chapter 2, “Introduction to Mac OS X Security,” contains a brief overview of some of the key security features found in the Mac OS X operating system.

Chapter 3, “Initial Installation” contains step-by-step guidance for installing a new Mac OS X system.

Chapter 4, “Configuring System Settings,” contains information on how to securely configure a Mac OS X system once it has been installed.

Chapter 5, “Configuring User Accounts,” contains guidance on how
to create new user accounts, how to give an account administrative access, how to limit account capabilities, how to configure each type of account to
make it secure, and information that should be passed on to users about using their accounts securely.

Chapter 6, “Future Guidance,” contains information about topics that were not covered in this guidance, but which are slated for future guidance.

Appendix A, “Encrypting Files and Folders,” gives instructions on two additional ways to encrypt files under Mac OS X that may provide additional security for information that is to be transferred via removable
media (e.g. CD) or network.

Appendix B, “References,” contains a list of resources used in creating this guide. Many of these resources are valuable sources of additional
information about Mac OS X in general, including many features not discussed in this guidance.

Appendix C, “Additional Resources,” contains a list of references that, though not used in preparation of this guide, may be of interest to the reader.

Do not attempt to implement any of the settings in this guide without first testing in a non-operational environment.

This document is only a guide containing recommended security settings. It is not meant to replace well-structured policy or sound judgment.
Furthermore this guide does not address site-specific configuration issues. Care must be taken when implementing this guide to address local operational and policy concerns.

The security changes described in this document only apply to Apple Mac OS X v. 10.3.x “Panther” and should not be applied to any other Mac OS versions or operating systems.

SHA1 Digest (osx_client_final_v_1_1.pdf) = ec987030952df96206bdfaea459cf8f8fb7f804d

SHA256 Digest (osx_client_final_v_1_1.pdf) =
a411e36a6ff0070e69c4e6a3cb80b7fbbfed52e
57e81b0eaf18ee2a2db5e17e9

Version 1.1 - 2004-10-15