Skip over navigation
Security

Security Fixes for 10.5(Leopard)

For those of you using 10.5, there are security holes that must be closed.

You will tighten security through the System Preferences panel that is found under the Apple in the Finder Menu.

  1.  Turn on the Firewall.  Other versions of Mac OS 10 had the firewall turned on automatically.  10.5 does not.  Double click on the Security  icon on the first row of the System Preferences.
  2.  

    In the General  window, check on

       
    • Disable automatic login
    • Use secure virtual memory
    • Disable  remote control infrared receiver

    Depending upon the location of your Mac, you may want to check on Require password to wake this computer from sleep or screen saver.

    Double click on the Firewall tab.  Click on Set access for specific services and applications.

  3. Turn off sharing, unless you really want to share your files with som eone else on the network.
  4. This particular Mac had File Sharing turned on.  To turn it off, double click on Sharing icon in the third row of the System Preferences.    Clear out all the boxes on the left hand side or at least limit access to a certain set of users.

    In this example I would click on File Sharing and Bluetooth Sharing to clear out the boxes.

  5.  Disable the sharing for the Guest Account.  Mac OS 10.5 creates a guest account with no password that is allowed to access shared files by default.  The guest account is not allowed to log into the Mac, but can access any files in the shared users' folders.
  6. Double click on the Accounts icon on the fourth row of the System Preferences.  

    Double click on the lock icon in the bottom left-hand corner of the window.  The system will ask for  an administrative account name and password to make changes to any of the accounts except your own.

    Once you are "Authenticated", click on the Guest Account.  

    On the window for the Guest Account, click on the checked box in front of Allow guests to connect to shared folders.  Leave the box blank.


11-28-2007 Margaret Doll