{"id":13506807,"url":"https://github.com/alichtman/stronghold","last_synced_at":"2025-05-14T07:09:04.225Z","repository":{"id":37561979,"uuid":"125603504","full_name":"alichtman/stronghold","owner":"alichtman","description":"Easily configure macOS security settings from the terminal.","archived":false,"fork":false,"pushed_at":"2025-02-24T07:31:58.000Z","size":15931,"stargazers_count":1130,"open_issues_count":10,"forks_count":263,"subscribers_count":29,"default_branch":"main","last_synced_at":"2025-05-13T03:39:42.884Z","etag":null,"topics":["command-line","command-line-tool","hardening","macos","macos-setup","osx","security","security-hardening"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alichtman.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-03-17T06:33:33.000Z","updated_at":"2025-05-05T20:52:42.000Z","dependencies_parsed_at":"2025-03-17T23:44:15.036Z","dependency_job_id":"1734e114-324a-4cab-a600-27629f8ab2f4","html_url":"https://github.com/alichtman/stronghold","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alichtman%2Fstronghold","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alichtman%2Fstronghold/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alichtman%2Fstronghold/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alichtman%2Fstronghold/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alichtman","download_url":"https://codeload.github.com/alichtman/stronghold/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254092776,"owners_count":22013290,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["command-line","command-line-tool","hardening","macos","macos-setup","osx","security","security-hardening"],"created_at":"2024-08-01T01:00:58.159Z","updated_at":"2025-05-14T07:08:59.215Z","avatar_url":"https://github.com/alichtman.png","language":"Python","funding_links":[],"categories":["Utilities","Project Logo","Python","Applications","Command-line tools","基于macOS的防护","Security Tools","macOS-based defenses","Operating Systems","Examples","Map of the content","セキュリティツール","macOS Security","System Utilities"],"sub_categories":["macOS","Security","Stronghold","🔒 Security (9)","威胁狩猎","Audio Record and Process","Overlay and Virtual Private Networks (VPNs)","Mac OS Defences","オーディオ録音・処理","Directory Navigation"],"readme":"![stronghold logo](img/stronghold-logo-left.png)\n\n[![Downloads](http://pepy.tech/badge/stronghold)](http://pepy.tech/count/stronghold)\n\n`stronghold` is the easiest way to securely configure your Mac.\n\n![GIF demo](img/demo.gif)\n\nDesigned for macOS Sierra and High Sierra. *Not yet tested on macOS Mojave, but I'm working on updating it!*\n\n**Usage**\n---\n\n```\nUsage: stronghold.py [OPTIONS]\n\n  Securely configure your Mac.\n  Developed by Aaron Lichtman -\u003e (Github: alichtman)\n\n\nOptions:\n  -lockdown  Set secure configuration without user interaction.\n  -v         Display version and author information and exit.\n  -help, -h  Show this message and exit.\n```\n\n**Installation Options**\n---\n\n1. Install with [`pip`](https://pypi.org/project/stronghold/)\n    + `$ pip install stronghold`\n    + `$ stronghold`\n\n2. Download the `stronghold` binary from Releases tab.\n\n\n**Configuration Options**\n---\n\n1. Firewall\n\n    + Turn on Firewall?\n        - This helps protect your Mac from being attacked over the internet.\n    + Turn on logging?\n        - If there IS an infection, logs are useful for determining the source.\n    + Turn on stealth mode?\n        - Your Mac will not respond to ICMP ping requests or connection attempts from closed TCP and UDP networks.\n\n2. General System Protection\n\n    + Enable Gatekeeper?\n    \t- Defend against malware by enforcing code signing and verifying downloaded applications before allowing them to run.\n    + Prevent automatic software whitelisting?\n        - Both built-in and downloaded software will require user approval for whitelisting.\n    + Disable Captive Portal Assistant and force login through browser on untrusted networks?\n        - Captive Portal Assistant could be triggered and direct you to a malicious site WITHOUT any user interaction.\n\n3. User Metadata Storage\n\n    + Clear language modeling metadata?\n        - This includes user spelling, typing and suggestion data.\n    + Disable language modeling data collection?\n    + Clear QuickLook metadata?\n    + Clear Downloads metadata?\n    + Disable metadata collection from Downloads?\n    + Clear SiriAnalytics database?\n\n4. User Safety\n\n    + Lock Mac as soon as screen saver starts?\n    + Display all file extensions?\n    \t- This prevents malware from disguising itself as another file type.\n    + Disable saving documents to the cloud by default?\n        - This prevents sensitive documents from being unintentionally stored on the cloud.\n    + Show hidden files in Finder?\n    \t- This lets you see all files on the system without having to use the terminal.\n    + Disable printer sharing?\n        - Offers redundancy in case the Firewall was not configured.\n\n**How to Contribute**\n---\n\n1. Clone repo and create a new branch: `$ git checkout https://github.com/alichtman/stronghold -b name_for_new_branch`.\n2. Make changes and test\n3. Submit Pull Request with comprehensive description of changes\n\n**Acknowledgements**\n---\n\n+ [@shobrook](https://www.github.com/shobrook) for logo and UI design assistance.\n+ Base logo vector made by [Freepik](https://www.freepik.com/) from [Flaticon](www.flaticon.com).\n+ [drduh's macOS-Security-and-Privacy-Guide](https://github.com/drduh/macOS-Security-and-Privacy-Guide) and [Jonathan Levin's MacOS Security Guide](http://newosxbook.com/files/moxii3/AppendixA.pdf) were incredibly helpful while I was building `stronghold`.\n\n**Donations**\n---\n\nThis is free, open-source software. If you'd like to support the development of future projects, or say thanks for this one, you can donate BTC at `1FnJ8hRRNUtUavngswUD21dsFNezYLX5y9`.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falichtman%2Fstronghold","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Falichtman%2Fstronghold","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Falichtman%2Fstronghold/lists"}