Kristov Atlas

Don't have a command for this yet, but iCloud is just generally evil and should be disabled altogether as a "recommended" config.

Bug: some configurations don't stick between logins

4

I think #29 broke some config fixes; By not running as sudo by default, we temporarily change the `defaults` value but it doesn't persist. I've noticed this with the application...

This requires passing some information between the results of the check command and the fix command, or to create really long fix commands that check first before fixing.

Example output: ``` The next configuration check requires elevated privileges; you may be prompted for your current OS X user's password below. The command to be executed is: 'sudo softwareupdate...

decide how to deal with sudo/administrative issues

2

It's probably a good practice to mostly use a non-admin account, but the non-admin won't be able to change configurations unless at least added to the sudoers list. Need to...

- [ ] app checks this directory for configs - [ ] add directory to .gitignore

https://techwiki.uwm.edu/display/SecOfficeStandGuide/Mac+Hardening+Guidelines

https://isc.sans.edu/forums/diary/The+Ultimate+OS+X+Hardening+Guide+Collection/12616/

CIS_Apple_OSX_10.10_Benchmark_v1.0.0.pdf