Security Overview
PDF
Introduction
Security Architecture
Mac OS X
BSD and Mach
CDSA
Apple CDSA Plug-ins
AppleCSP Module
AppleFileDL Module
AppleCSP/DL Module
AppleX509CL Module
AppleX509TP Module
Security Server Daemon
Security Server
Security Agent
CSSM Services
Cryptographic Services
Data Store Services
Certificate Services
Trust Policy Services
Authorization Computation Services
Mac OS X Security APIs
Keychains
Secure Transport
CFNetwork
URL Loading System
Certificate, Key, and Trust Services
Authorization Services
Security Objective-C API
Movie Toolbox Access Keys
iPhone OS
Security Server Daemon
iPhone OS Security APIs
Keychain
CFNetwork
Certificate, Key, and Trust Services
Randomization Services
Security Concepts
Aspects of Security
Local Security
Remote Transport Security
System-Restricted or Self-Restricted Access
Authentication, Identification, and Authorization
Encryption and Decryption
Symmetric Keys
Asymmetric Keys
Diffie-Hellman Key Exchange
Cryptographic Hash Functions
Encrypting Messages
Digital Signatures
Digital Certificates
Authentication and Identification Methods
Mac OS X
Shared Secret
One-Time Pads
Time-Based Authentication
Kerberos
Kerberos Authentication Process
Kerberos and Authorization
Single Signon
Large Networks
Public Keys
Certificates
Permissions
Mach Port Rights
BSD
File System Security Policy
Owner or Root Security Policy
Root EUID Security Policy
Authorization Services and BSD Security Policies
Sandboxing and the Mandatory Acccess Control Framework
ACLs
File System Access Control Policy
ACLs and User IDs
Evaluating Permissions
Inheritance of Permissions
Mac OS X
The Root User
The Wheel Group
The Admin Group
Network File Systems
AFP
NFS
SMB/CIFS
WebDAV
Authorization
Secure Storage
Secure Communication
Protocols for Secure Communication
Secure Communication APIs
Security Services
Restrictions On Code Execution
File Quarantine
Authentication
Authorization Services
Cryptography
Certificate, Key, and Trust Services
Code Signing
Keychain Manager and Keychain Services
Smart Card Services
Secure Transport
CFNetwork
URL Loading System
Kerberos
Security Objective-C API
Movie Toolbox Access Keys
User-Level Security Features
Security System Preferences
FileVault
Accounts System Preferences
Keychain Access
Revision History
Glossary
Index