![stronghold logo](https://github.com/alichtman/stronghold/raw/master/img/stronghold-logo-left.png)
![Downloads](http://pepy.tech/badge/stronghold)
stronghold
is the easiest way to securely configure your Mac.
![GIF demo](https://github.com/alichtman/stronghold/raw/master/img/demo.gif)
Designed for macOS Sierra and High Sierra. Not yet tested on macOS Mojave, but I'm working on updating it!
Usage
Usage: stronghold.py [OPTIONS]
Securely configure your Mac.
Developed by Aaron Lichtman -> (Github: alichtman)
Options:
-lockdown Set secure configuration without user interaction.
-v Display version and author information and exit.
-help, -h Show this message and exit.
Installation Options
-
Install with pip
$ pip install stronghold
$ stronghold
-
Download the stronghold
binary from Releases tab.
Configuration Options
-
Firewall
- Turn on Firewall?
- This helps protect your Mac from being attacked over the internet.
- Turn on logging?
- If there IS an infection, logs are useful for determining the source.
- Turn on stealth mode?
- Your Mac will not respond to ICMP ping requests or connection attempts from closed TCP and UDP networks.
-
General System Protection
- Enable Gatekeeper?
- Defend against malware by enforcing code signing and verifying downloaded applications before allowing them to run.
- Prevent automatic software whitelisting?
- Both built-in and downloaded software will require user approval for whitelisting.
- Disable Captive Portal Assistant and force login through browser on untrusted networks?
- Captive Portal Assistant could be triggered and direct you to a malicious site WITHOUT any user interaction.
-
User Metadata Storage
- Clear language modeling metadata?
- This includes user spelling, typing and suggestion data.
- Disable language modeling data collection?
- Clear QuickLook metadata?
- Clear Downloads metadata?
- Disable metadata collection from Downloads?
- Clear SiriAnalytics database?
-
User Safety
- Lock Mac as soon as screen saver starts?
- Display all file extensions?
- This prevents malware from disguising itself as another file type.
- Disable saving documents to the cloud by default?
- This prevents sensitive documents from being unintentionally stored on the cloud.
- Show hidden files in Finder?
- This lets you see all files on the system without having to use the terminal.
- Disable printer sharing?
- Offers redundancy in case the Firewall was not configured.
How to Contribute
- Clone repo and create a new branch:
$ git checkout https://github.com/alichtman/stronghold -b name_for_new_branch
.
- Make changes and test
- Submit Pull Request with comprehensive description of changes
Acknowledgements
Donations
This is free, open-source software. If you'd like to support the development of future projects, or say thanks for this one, you can donate BTC at 1FnJ8hRRNUtUavngswUD21dsFNezYLX5y9
.