The Mac Observer

Skip navigational links

DealsOnTheWeb Daily Deal: OneCall's Weekend Sale - 20 Great Items at Great Prices All Weekend Long

TMO Quick Tip - Lock Down Your Root User

by , 7:30 AM EDT, September 24th, 2007

Mac OS X may sport a friendly user interface, but it is harboring a Unix core underneath. That means the security steps Unix pros take can apply to regular Mac users as well including making sure that root, the ultimate power user on your computer, is under your control and no one else's.

By default, the root user on your Mac is disabled, but it doesn't have a password set, which is a potential security weak point. Setting a password makes it that much more difficult for bad guys to try to hack into your Mac.

I added a password to my root user account, and I also keep that user disabled. Here's how:

  • Launch NetInfo Manager. It's in Applications/Utilities.

  • NetInfo Manager
  • Click the padlock in the NetInfo Manager window and enter your administrator user name and password.
  • Choose Security > Enable Root User.

  • Enable your root user.
  • You should see an alert dialog telling you that your root user password is blank. Click OK.

  • Your Mac lets you know if you haven't set a root password yet.
  • Enter a password for your root user. Make sure it isn't a password that you are already using for another account on your Mac. Now click OK.

  • Enter a unique password for your root user.
  • Choose Security > Disable Root User.

  • Disable your root user.
  • Enter your administrator user name and password and click OK.
  • Click the padlock in the NetInfo Manager window to prevent any other changes.

Locking down your root user is important because anyone that gains root access to your Mac can do anything they want including deleting files or user accounts, installing applications without your knowledge, and siphoning off any information they want from your hard drive. That isn't likely to happen, but taking steps to help insure that it won't happen is a pretty good idea.


Jeff Gamet is TMO's Morning Editor and Reviews Editor. He lectures, teaches and speaks on Mac OS X and design-related topics, and is the author of The Designer's Guide to Mac OS X from Peachpit Press.

if you have tips or tricks to share, or Mac-related questions you want answered.

Observer Comments

Show: Subjects Only | Full Comments
Close Name:geoduck Posts: 1721 Joined: 30 Dec 2003
Subject:

Wow, I just assumed that making sure Root was disabled was enough. I guess I'll be working on my three machines tonight. thanks for the tip.

View Name:Guest
Subject: remember?
Close Name:brett_x Posts: 312 Joined: 24 Jan 2006
Subject: Good question, guest.

Quote
Guest wrote:
what happens if you forget your root user password. Is it kept in keychain?

No, it is not kept in any keychain. If you forget it, you have to boot to an OS X install CD and reset it. You can do that for any local OS X user account. If you're concerned about this ability, you should have an Open Firmware password that prevents booting from CD or any external device without [yet another] password.

View Name:Guest
Subject:
Close Name:RGE Posts: 165 Joined: 16 Aug 2003
Subject:

Could someone please explain how setting a password for the root account helps, if the root account is disabled anyway? The point isn't addressed in the article.

View Name:Guest
Subject: Open Firmware password?
Close Name:LaurieF -   TMO Forum Mod Posts: 3497 Joined: 15 Jun 2001
Subject:

http://www.apple.com/downloads/macosx/apple/firmware_hardware/openfirmwarepassword.html

View Name:Guest
Subject: Huh?
View Name:Guest
Subject: Also...
Comment on this Article


You cannot edit your comments.   You cannot delete your comments.
Log in | Register | Having Problems? Reset TMO Cookies & Try Again
Username:   Password:   Log me on automatically each visit   

You are not logged in, and this post will appear as "Guest." Log in with your username and password from the TMO forums. If you do not have a username, you can register here.
Please note that guests are limited to including a maximum of two URLs per post.


Post A Comment
  Subject


  Your Comments



Please enter the word exactly as you see it in the image above. Registered users aren't prompted for this. Having trouble reading the image get a new one.


Recent Headlines - Updated Friday, July 4th, 2008

Fri., 7:30 AM
Happy Fourth of July!
Thu., 4:50 PM
Apple Slashes $400 from SSD Drive in MacBook Air
4:05 PM
It's Official - Firefox Sets Guinness Record for Downloads
3:30 PM
Apple Files Patent for a Multi-touch Gesture Language
2:20 PM
Editorial - Mac's Market Share and the Cascade Failure of Windows
1:35 PM
iPodObserver - Apple Slurps Up Samsung's NAND Flash for iPhone 3G
1:05 PM
WSJ: Tips for Switching from Windows to Mac
12:05 PM
iPodObserver - Google Intros Google Talk for iPhone
11:35 AM
iPO Just a Thought - iPod nano Versus iPhone: Decisons, Decisions...
10:55 AM
YouTube Ordered to Turn Over All User Records to Viacom
10:10 AM
Hot Forum Topic - Apple vs. Cell Carriers: Who's Winning the Game
9:25 AM
iPodObserver - Rumor: Best Buy, Radio Shack to Sell iPhone 3G
8:45 AM
.Mac Bookmark Sync Deadline Extended to July 6
8:10 AM
Adobe Reader 9 Hits the Streets
 

The Mac Observer Reader Specials

  • Download Typestyler, still the Ultimate Styling Tool for Internet, Print and Video Graphics. Works great in Classic with a Native OS X Version on the way. Free Tryout: www.typestyler.com
  • OWC: NewerTech miniStack FireWire/USB 2.0 HD & Hub Up to 1.0TB of Performance Storage + FW/USB2 Powered Hubs - convenient & sleek 6.5" x 6.5" x 1.5" Featured: 500GB $169.99; 750GB $209.99; 1.0TB $339.99
  • MacPro Memory 667Mhz With Apple Spec Heat Sink 2GB $90 / 4GB $134 / 8GB $264. Click to Maximize your Macs...
  • Mac observers can now play Party Poker for Mac as well as Mac casino games by going to MacPokerOnline.com.
  • RamJet Memory: MacBook 1Gig $39, 2Gig $78, 4Gig $195! Mac Pro 2Gig $115, 4Gig $189! 500G Seagate SATA II $139! Click here
  • For the latest Apple products use Ciao a comparison website to find laptops like MacBook Air. Then find the best prices on MP3 players and use our comparison tool to evaluate cell phones.

  • Laptop Hardware Provided by TechRestore - Overnight Mac & iPod Repairs.
  • Special Report: WWDC 2008
  • Special Report: iPhone
  • __________
  • Help TMO Grow
  • Podcast: Mac Geek Gab
  • Podcast: Apple Weekly Report
  • TMO on Twitter!
  • New Media Expo 2008

Apple Stock Quote

  • AAPL: $170.12. Change Today: +1.94.
  • (Prices delayed up to 20 minutes.)
  • Discuss in our Apple Finance Board

Hot Topics

Apple iTunes

Top Deals From DealsOnTheWeb