OSX Postinstall

Set of post-installation scripts for OS X 10.11 (El Capitan)

About

The main objective

Script install BlockBlock and apply OS X Lockdown settings (optionally) before all installations. So, you can control Launch Agents installations with BlockBlock and pray for OSX Lockdown hardening settings, because there is no silver bullet. Whatever, we will do all possible for it, right?

Under the hood

• bin/:
  • main.sh - main script which will run all of them
  • msf_install.sh - Metasploit Framework install
  • osxdefaults.sh - OSX Defaults setup
  • osxlockdown.sh - OSX Lockdown setup
  • sublime_setup.sh - ST3 setup
  • git_install.sh - install tools from git-tools folder (below)
  • tools_install.sh - install tools from tools_list.txt (below)
• data/:
  • settings/ - ST3, iTerm and Karabiner settings
  • tools/:
    • git-tools/ - set of tools which you want to install via git
    • git-tools-template/ - template for future git-tools installations
    • tools_list.txt - lists of tools which you want to install via brew, brew cask, gem, pip, etc

Usage

brew / cask / pip / gem tools

1. Install Xcode via App Store
2. Download zip archive of the repo
3. Unzip it using GUI or unzip tool via Terminal.app
4. Edit data/tools/tools_list.txt using format that shown below:

$ head  data/tools/tools_list.txt
# each line consist of:
#     - tool:id
# id:
#     0 - brew install
#     1 - brew cask install
#     2 - pip install
#     3 - gem install
#     4 - brew tap
#     5 - vagrant plugin install
#     6 - ln -sfv /usr/local/opt/<tool>/*.plist ~/Library/LaunchAgents

5. Go to bin/, then run ./main.sh --help and choose available options

git tools

1. Go to data/tools/git-tools folder, and add (using git-tools-template) or delete git tools
2. Go to bin/, then run ./git_install.sh --help and choose available options

other bin/ scripts

For more info:

• msf_install.sh --help
• cat osxdefaults.sh
• cat osxlockdown.sh (not all options enabled by default! see comments)
• cat sublime_setup.sh

Manual-only installations

Karabiner

Run Karabiner and set check mark Overwrite the key repeat values of system: After that, run data/settings/karabiner/karabiner-import.sh.

iTerm

Run iTerm, open Preferences and set path to data/settings/iterm to Load preferences from a custom folder of URL field: After that, reload iTerm.

SUIDGuard

Download and install SUIDGuard. (WARNING: SUIDGuard crashes on 10.11.4 on boot)

TO-DO

• Add osxparanoia stuff
• Porting osxfortess to Homebrew
• Deploy and configure Splunk + osquery