MacOS

Hardening

A very early stage formula has some useful content to achieve hardening on MacOS minions here,

• https://github.com/colin-stubbs/salt-formula-macos

The following standard Salt states work fairly well for MacOS,

• service.*
• user.*

If writing your own states/formulas consider avoiding cmd.run based states, however in some cases the existing execution/state modules will not work on a High Sierra/10.13.x system.

• https://docs.saltstack.com/en/latest/ref/states/all/salt.states.mac_defaults.html

• https://docs.saltstack.com/en/latest/ref/states/all/salt.states.mac_keychain.html

• https://docs.saltstack.com/en/latest/ref/states/all/salt.states.mac_package.html

• https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.mac_defaults.html

• https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.mac_pkgutil.html

• https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.mac_power.html

• https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.mac_softwareupdate.html