Apple Training Series. Mac OS X System Administration Reference, Volume 1
Authors: Regan S
Published year: 2005
Pages: 113-116/258
Buy this book on amazon.com >>

What You've Learned

  • When the sticky bit is placed on a folder, only the owner of an item within that folder can delete or edit that item.

  • You can use fsaclctl to work with Access Control Lists on Mac OS X and Mac OS X Server.

  • By setting the SUID bit on an executable file, you are telling the file system that, no matter who launches the executable file, the file will execute as though it was launched by the assigned owner of the file.

  • Mac OS X has a set of core OS keychains it uses to store SSL certificate authority information; the keychains are located in /System/ Library/ Keychains .

  • The command line srm uses seven U.S. DoDcompliant passes , or a single pass of random data to erase data.

References

Administration Guides

"Mac OS X Server Getting Started": http://images.apple.com/server/ pdfs /Getting_Started_v10.4.pdf

"Mac OS X Server File Services Administration for Version 10.4 or Later": http://images.apple.com/server/pdfs/File_Services_v10.4.pdf

"Mac OS X Server Windows Services Administration for Version 10.4 or Later": http://images.apple.com/server/pdfs/Windows_Services_v10.4.pdf

"Mac OS X Server Command-Line Administration for Version 10.4 or Later": http://images.apple.com/server/pdfs/Command_Line_v10.4.pdf)



Lesson Review

1.

What folders are read access by others in every user 's home folder?

2.

What three levels of granularity can be set when using standard UNIX permissions?

3.

What is the command to set the sticky bit for a folder?

4.

How do you enable ACLs on the local volume using Mac OS X?

5.

Name four attributes permitted on all objects.

6.

How do you find all items on your local hard disk that have both SUID and GUID set on them?

7.

What is the command-line utility that permits the creation and management of disk images?

Answers

1.

Public and Sites

2.

Read, write, and execute

3.

chmod +t / path /to/folder

4.

sudo /usr/sbin/fsaclctl -p / -e

5.

delete , readattr , writeattr , chown

6.

sudo find / -perm +6000 -print

7.

hdiutil



Lesson 15. Mobility Security Concerns

Time

This lesson takes approximately 1 hour to complete.

Goals

Understand the features and security risks of Bluetooth and 802.11 WLANs

Configure Mac OS X Bluetooth for security

Compare the features and level of security provided by WEP, 802.1X/WEP, WPA Enterprise, and WPA Personal

Configure Mac OS X for WEP, 802.1X/WEP, WPA Enterprise, and WPA Personal


Macintosh users are on the move. They expect to get work done at home, at school, at work, in their cars , in meeting rooms, in the company cafeteria, and even in the local coffee shop. Now that notebook computers really are the size of notebooks , mobility is here to stay. Employers and IT departments recognize the increases in productivity and employee satisfaction when workers have reliable mobile connectivity. They also recognize the challenges of providing safe and secure mobile connectivity. Fortunately, Mac OS X has many features that support mobile technologies.

In this lesson, you will become familiar with mobile technologies and the security risks associated with them. Then, you'll learn how to implement Mac OS X security features for these technologies.



Choosing Mobile Technologies

The computer industry has addressed users' demand for mobility in many ways. Users can read e-mail, surf the Web, and conduct business over the Internet using notebook computers, cell phones, personal digital assistants (PDAs), and even wearable technology built into clothing.

Two technologies have emerged as the leaders in connecting devices and networks while on the move: Bluetooth, a short-range radio technology for connecting devices, and 802.11, a set of IEEE standards for radio frequency wireless local area networks (WLANs).

Understanding Bluetooth

Bluetooth is a technology for connecting devices within a short range (about 10 meters ) using a radio link between the devices. Bluetooth-enabled devices, including Macintosh systems, keyboards, mice, and cell phones, can pair with each other in a manner that is user friendly and doesn't require cables. The Bluetooth Special Interest Group hopes that Bluetooth will one day replace the cables that currently connect one device to another.

Other benefits of Bluetooth include simplicity, low cost, low power usage, and robustness.

Note

Bluetooth is standardized by an industry consortium called the Bluetooth Special Interest Group. The founding members of this group include Ericsson, IBM, Intel, Nokia, and Toshiba. Apple Computer is an associate member.


Bluetooth radio modules operate in the unlicensed Industrial Scientific Medical (ISM) frequency band at 2.4 GHz, which is a band used by many technologies. Bluetooth radios avoid interference from other signals by hopping to a new frequency after transmitting or receiving a packet. Compared with other systems in the same frequency band , including 802.11b and 802.11g wireless LANs, a Bluetooth radio hops faster and uses shorter packets. This means that Bluetooth operates well in environments with a lot of radio frequency activity.

When connected, Bluetooth devices allow users to upload and download files, access peripherals such as printers without using cables, listen to music on wireless headphones, and automatically synchronize contact and calendar information.

Mac OS X includes a Bluetooth File Exchange application that allows remote users to browse, upload, and download files from a specified directory on a Bluetooth-enabled Macintosh. Bluetooth File Exchange also lets a Macintosh user send files to other Bluetooth devices. Setting up Bluetooth connectivity and applications is easy to do, but there are security concerns, as discussed later in this lesson in the "Identifying the Security Risks of Mobility" and "Implementing Bluetooth Security in Mac OS X" sections.

Understanding 802.11 Wireless LANs

Whereas Bluetooth pairs two short-range devices so they can share information, 802.11 technology creates a WLAN permitting multiple devices to communicate over a distance of up to 50 meters. With the addition of a wireless access point, such as the Apple AirPort Extreme Base Station, devices can access the wired network and often the Internet, assuming that the wired network (or the access point itself) includes a router with Internet connectivity. Although 802.11 protocols support users communicating in an "ad-hoc mode" in a computer-to-computer network, it is more common to use an access point, which IEEE calls infrastructure mode .

Note

The distance listed here is 50 meters, but could be further under certain circumstances. It's best to simply assume that all wireless connection methods should be secured.


Like Bluetooth, 802.11 WLANs use radio frequency. The IEEE 802.11 Working Group has standardized the following WLAN technologies:

  • IEEE 802.11 operates in the 2.4 GHz frequency band, supports 1 to 2 Mbps, and uses direct-sequence spread spectrum (DSSS) or frequency-hopping spread spectrum (FHSS).

  • IEEE 802.11a operates in the 5 GHz frequency band, supports 54 Mbps, and uses orthogonal frequency division multiplexing (OFDM).

  • IEEE 802.11b operates in the 2.4 GHz frequency band, supports 1, 2, 5.5, and 11 Mbps, and uses high-rate DSSS (HR/DSSS).

  • IEEE 802.11g operates in the 2.4 GHz frequency band, supports 54 Mbps, and uses OFDM, but is not compatible with 802.11a, which also uses OFDM. (802.11g is compatible with 802.11b.)

Today, most WLANs use 802.11b or 802.11g. 802.11g is preferred by most users because it has a faster data rate. The IEEE is also working on a new standard, called 802.11n. The promise of 802.11n is longer range and even higher data rates. Whereas most WLANs today offer a maximum speed of 54 Mbps, 802.11n will approximately double that transmission speed to about 100 Mbps.


Apple Training Series. Mac OS X System Administration Reference, Volume 1
Authors: Regan S
Published year: 2005
Pages: 113-116/258
Buy this book on amazon.com >>

Similar books on Amazon