# change the Finder's umask for all user accounts (on Mac OS X)

# cf. http://www.makemacwork.com/secure-finder-permissions.htm
sudo defaults write /Library/Preferences/com.apple.finder umask -int 077     # creates a new preferences file
defaults read /Library/Preferences/com.apple.finder
#defaults delete /Library/Preferences/com.apple.finder umask
ls -l /Library/Preferences/com.apple.finder.plist


# change the Finder's umask for your user account only

defaults write com.apple.finder umask -int 077
defaults read com.apple.finder umask
#defaults delete com.apple.finder umask
ls -lh ~/Library/Preferences/com.apple.finder.plist

# alternative
defaults -currentHost read -g
defaults -currentHost read "Apple Global Domain"
defaults -currentHost write -g umask -int 077
#defaults -currentHost delete -g umask
ls -lh ~/Library/Preferences/ByHost/.GlobalPreferences.*.plist


defaults read -g
defaults read /Library/Preferences/.GlobalPreferences
ls -lh /Library/Preferences/.GlobalPreferences.plist

# cf. Secure deletion: a single overwrite will do it, 
# http://www.h-online.com/news/Secure-deletion-a-single-overwrite-will-do-it--/112432


man 8 diskutil | less -p secureErase


df -l

/usr/bin/sudo -H -i

#/usr/sbin/diskutil secureErase freespace 1 /dev/diskNsNN       # single pass randomly erase the disk
#/usr/sbin/diskutil secureErase freespace 2 /dev/diskNsNN       # US DoD 7 pass secure erase
#/usr/sbin/diskutil secureErase freespace 3 /dev/diskNsNN       # Gutmann algorithm 35 pass secure erase


/bin/df -l | /usr/bin/awk '/^\/dev/{print $1}' | xargs stat -x

IFS=$'\n'
for devdisk in $(/bin/df -l | /usr/bin/awk '/^\/dev/{print $1}'); do
   [[ ! -b "$devdisk" ]] && echo "No block device: ${devdisk}" && continue
   /usr/sbin/diskutil secureErase freespace 1 "$devdisk"
done
IFS=$' \t\n'

exit

<Directory "/Library/MediaWiki/web/images">
   # Ignore .htaccess files
   AllowOverride None
 
   # Serve HTML as plaintext, don't execute SHTML
   AddType text/plain .html .htm .shtml
 
   # Don't run arbitrary PHP code.
   php_admin_flag engine off
 
   # If you've other scripting languages, disable them too.
</Directory>

# cf. man 5 clamd.conf after update

# delete the following two lines in /private/var/clamavadmin/clamd.conf
ArchiveMaxFileSize 100M
ArchiveMaxCompressionRatio 0

# add the following two lines to /private/var/clamavadmin/clamd.conf
MaxFileSize 300M
MaxScanSize 150M

<IfModule mod_rewrite.c>
  RewriteRule ^(.*/)?\.svn/ - [F,L]
  ErrorDocument 403 "Access Forbidden"
</IfModule>

<DirectoryMatch "^/.*/(\.svn|CVS)/">
  Order deny,allow
  Deny from all 
</DirectoryMatch>

find /home/*/public_html/ -perm 0777 -ls
find /home*/public_html/ -uid 99 -ls

# deny access for Indy Library a Tester
$HTTP["useragent"] =~ "Indy" { url.access-deny = ( "" ) }
 
# deny access for a hydrocodone containing refer 
$HTTP["referer"] =~ "hydrocodone" { url.access-deny = ( "" ) }