(OS X) A checklist for hardening OS X system images