defaultslocalhost

ConfigurationManagementforMacOSX:It'sjustUnix,RightDavidG.
PullmanJanetBassNationalInstituteofStandardsAndTechnology(NIST)ConfigurationManagementDISASecurityTechnicalImplementationGuidesGettingtheConfigurationtotheMacOnetimescriptDoesn'tmaintaintheconfigurationSecureconfigguidesandApplescripts(SystemPreferences)SettingssometimesnoteffectiveSomeareperusersettingsWeneededtofindwherethesystempreferenceswereheld…Systempreferences:plistsApple's".
conf"filesSomearefoundintheconfigguides…WherearetheyWefoundthefile!
Checkitout…less/Library/Preferences/com.
apple.
loginwindow.
plist!
"/Library/Preferences/com.
apple.
loginwindow.
plist"maybeabinaryfile.
Seeitanyway!
bplist00^A^B^C^D^E^F^G^H!
^K^L^M^N^L^R_^P^YOptimizerLastRunForSystem\lastUserName_^P^XOptimizerLastRunForBuild_^P^WMCXLaunchAfterUserLoginXlastUser_^P^UMCXLaunchOnUserLogout\SHOWFULLNAME_^P^PRetriesUntilHint^R!
^F^D^@Xdpullman^R^AEGXloggedIn^O^LXdpullman^P^@^H^Y5B]wA^A^@^@^S^E5>!
/Library/Preferences/com.
apple.
loginwindow.
plist(END)!
WorkingwithplistsPropertyListEditor:NiceGUIEditor…PlistBuddy:CLI:readandwritevalues…plutil:CLI:convertformat,runlint…defaults:commandlineaccesstotheplists!
Readingtheplistfile/Library/Preferences/com.
apple.
loginwindow.
plist!
/Library/Preferences/com.
apple.
loginwindow.
plist:Applebinarypropertylist!
!
defaultsread/Library/Preferences/com.
apple.
loginwindow!
{!
MCXLaunchAfterUserLogin=1;!
MCXLaunchOnUserLogout={!
dpullman=1;!
};!
OptimizerLastRunForBuild=21317408;!
OptimizerLastRunForSystem=168166400;!
RetriesUntilHint=0;!
SHOWFULLNAME=1;!
autoLoginUser=dpullman;!
lastUser=loggedIn;!
lastUserName=dpullman;!
}!
Readingtheplistentriesdefaultsread/Library/Preferences/com.
apple.
loginwindowautoLoginUser!
dpullman!
!
defaultsdelete/Library/Preferences/com.
apple.
loginwindowautoLoginUser!
!
defaultsread/Library/Preferencescom.
apple.
loginwindowautoLoginUser!
2010-11-0219:25:08.
924defaults[5631:903]!
Thedomain/defaultpairof(com.
apple.
loginwindow,autoLoginUser)doesnotexist!
Writingplistvalues…defaultswrite/Library/Preferences/com.
apple.
BluetoothControllerPowerState–int0!
!
defaultswrite/Users/$user/Library/Preferences/ByHost/com.
apple.
ImageCaptureExtension2.
$uuidshared-boolFALSE!
!
defaultswrite/Library/Preferences/com.
apple.
loginwindowMasterPasswordHint''!
!
defaultswrite/Library/Preferences/SystemConfiguration/com.
apple.
natNAT-dictEnabled-int0!
!
defaultswrite/private/var/db/dslocal/nodes/Default/users/rootauthentication_authority-array';DisabledUser;;ShadowHash;'!
!
Inouropinion,AppleprogrammersworkonanislandtheoryProblemswithplistsGettingtherightsettings,sometimesmultiplesettingsSometimesthesettingswouldn'tworkEvenifyousetthem,theusercanjustchangethembackDisableBluetooth-Linuxservicebluetoothstop!
chkconfigbluetoothoff!
DisableBluetooth-OSXlaunchctlunload-w/System/Library/LaunchDaemon/com.
apple.
blued.
plist!
!
defaultswrite/Library/Preferences/com.
apple.
BluetoothControllerPowerState0!
!
networksetup-setnetworkserviceenabledbluetoothoff!
!
dscl/Local/MCXmcxset/Computers/localhostcom.
apple.
MCXBluetoothDisableBluetoothalways–bool1!
PreparetoLaunch!
launchctl–theinterfacetolaunchdloadsandunloadsdaemons/agentsResourcereportingandcontrolandmoreUn-Launch!
launchctlunload-w/System/Library/LaunchDaemon/com.
apple.
blued.
plist!
!
!
Checkingforadisabledlauncherdefaultsread/System/Library/LaunchDaemons/com.
apple.
bluedDisabled!
1!
Checkingforadisabledlauncherdefaultsread/var/db/launchd.
db/com.
apple.
launchd/overridescom.
apple.
blued!
{!
Disabled=1;!
}!
ProblemswithlauchctlSimilartoproblemswithplist…AwkwardtocheckifaserviceisenabledordisabledTheusercanturnthembackon…Lockingitdown…OSXServerWorkgroupManagerdscl:theDirectoryServiceCommandLine!
Lockingitdown…Locallydscl/Local/MCXmcxread/Computers/localhostcom.
apple.
MCXBluetoothDisableBluetooth!
State:always!
Value:1!
!
dscl/Local/MCXmcxset/Computers/localhostcom.
apple.
MCXBluetoothDisableBluetoothalways–bool1!
Gettingthere…butnotveryfaryetOnlysomecontrolsareavailableinMCXThesametypeandstructurevariationasplistsIt'sjustUNIX,RightAsmuchasanythingelsethesedays!
Plistsareacommonpreferencecontrol…onceyougetusedtothevariations!
Launchdisacombinationofinit,inet,cron…launchctlcouldusealittlemorefunctionalityMCXanddsclprovidesecureconfiguration…fortheitemsitcancontrolCfengineMetalanguagenotapplicableModuleswork(Perl!
)ReferencesDISASTIGs:http://iase.
disa.
mil/stigs/checklistfseventer:http://www.
fernlightning.
comMacOSXSecurityConfigurationGuides:http://www.
apple.
com/support/security/guidesCfengine:http://www.
cfengine.
orgInformation:http://www.
afp548.
comInformation:http://www.
mactech.
comGregNeagle'sBlog:http://managingosx.
wordpress.
comInformation:http://www.
macenterprise.
org…andmanymore…