Changes between Version 3 and Version 4 of SandboxUser

Timestamp:

May 25, 2007, 1:12:50 PM (18 years ago)

Author:

davea

Comment:

--

SandboxUser

@@ -1 @@
-= The Secure BOINC Client =
-        
-Version 5.5.4 of BOINC Manager for the Macintosh features new, stricter security measures. This additional security helps protect your computer data from potential theft or accidental or malicious damage by limiting BOINC projects' access to your system and data. Once we have tested this security implementation on the Mac, we plan to extend it to other computer platforms, including Linux and Windows.
+= Client security and sandboxing =
+
+''Account-based sandboxing'' is a technique in which
+BOINC applications run in an unprivileged user account,
+to limit the ability of project applications to access
+files outside of the BOINC directory or to cause other problems.
+An excellent discussion of this and other security issues 
+is [http://boinc.truxoft.com/security.htm here].
+
+Starting with version 5.5.4, the Macintosh version of BOINC does account-based sandboxing.
+Account-based sandboxing will be added to the Windows version starting in version 6.0.
+
+On Linux and Windows, you can implement account-based sandboxing
+by creating a new, unprivileged account,
+and installing BOINC under that account.
+
+== Account-based sandboxing on the Macintosh ==
+
+Version 5.5.4 of BOINC Manager for the Macintosh features new, stricter security measures. This additional security helps protect your computer data from potential theft or accidental or malicious damage by limiting BOINC projects' access to your system and data.
 
 The installer sets special permission for the BOINC Manager and Client, which allows them to write to the shared BOINC Data regardless of which user is logged in. If you '''copy''' BOINC Manager or the BOINC core client without using the installer, it will not run properly. However, you can safely '''move''' the BOINC Manager within the same disk drive or partition. If you need multiple copies, run the installer again after moving BOINC Manager; this will create a fresh copy in the `/Applications` folder.