Setup guide

UNCLASSIFIED
UNCLASSIFIED
1
Introduction
The purpose of this guide is to provide an overview of Mac OS X Server v10.3
operating system security and recommendations for configuring its security features.
This guide tries to provide recommendations for many different roles a Mac OS X
Server system can assume in a network.
This guide is intended for administrators of Apple Mac OS X Server v10.3.x systems
and it is assumed that anyone using this guidance will be an experienced Mac OS X
user, will be familiar with the Mac OS X user interface, and will have at least some
experience using a command-line interface (e.g. the Terminal program). In addition,
anyone using this guidance should have experience in administering a network, be
familiar with basic networking concepts, and be familiar with Apple’s system
administration guidance (listed in the References chapter).
Some instructions within this guidance are complex, and deviation could result in
serious adverse effects on the system and its security. Modification of these
instructions should only be performed by experienced Mac OS X administrators, and
followed by thorough testing.
Getting the Most from this Guide
The following list contains suggestions for successfully using the Apple Mac OS X
Server Security Configuration Guide:
• Read the guide in its entirety. Subsequent sections may build on information
and recommendations discussed in prior sections.
• This guidance should always be tested in a non-operational environment
before deployment. This non-operational environment should simulate the
architecture where the system will be deployed as much as possible.
• This guidance is intended primarily for Mac OS X Server systems. Before
applying this guidance to a system, an administrator should determine what
function that particular system will perform, and apply the applicable sections
of this guidance.
Any deviations from this guidance should be evaluated to determine what security
risk it may introduce, and measures should be taken to monitor or mitigate those
risks.