\f1\b0 and upgrading from a version of BOINC earlier than 5.3.21 on an Intel Mac, or if you are transferring BOINC Data from a PowerPC Mac to an Intel Mac, or from an Intel Mac to a PowerPC Mac. To prevent this, open BOINC Manager's window, select the
\f1\i0 tab and make sure there are no tasks "Ready to report."\
\
\f0\b Setting BOINC as your screen saver:
\f1\b0 Although this installer adds the BOINC screen saver to your system, it does not change your screen saver settings. To select BOINC as your screen saver, use the Screen Saver or Screen Effects panel in the System Preferences (accessible from the Apple menu). \
Note: on some versions of the Mac OS, you may not be able to exit the BOINC screen saver by moving the mouse; you may need to press the mouse button or press any key on the keyboard to exit. \
\f1\b0 \cf0 Version 5.5.4 of BOINC Manager for the Macintosh features new, stricter security measures. This additional security helps protect your computer data from potential theft or accidental or malicious damage by limiting BOINC projects' access to your system and data. \
\
If you experience problems with this software, you can re-install a version of BOINC prior to 5.5.4; this will automatically revert ownership and permissions to the earlier implementation.\
\
Once we have tested this security implementation on the Mac, we plan to extend it to other computer platforms, including Linux and Windows.\
\cf0 The installer sets special permission for the BOINCManager and Client, which allows them to write to the shared BOINC Data regardless of which user is logged in. If you
\f0\b copy
\f1\b0 BOINCManager or the BOINC core client without using the installer, it will not run properly. \
\
However, you can safely
\f0\b move
\f1\b0 the BOINC Manager within the same disk drive or partition. If you need multiple copies, run the installer again after moving BOINC Manager; this will create a fresh copy in the
\cf0 BOINC verifies that ownership and permissions are set properly each time it is launched. It will tell you to re-install BOINC if there is a problem.\
\
The new safeguards use the basic security protections built into UNIX (the base underlying Mac OS X): permissions and ownership.\
\
The administrator (usually the owner) of each computer creates one or more users who can log in, can create private files, and can share other files. Some of these users are given administrative privileges, some may not have these privileges.\
There are also groups, which have one or more users as members. For example, users with administrative privileges are usually members of the "admin" group.\
In addition to these "visible" users and groups, the operating system contains a number of "hidden" users and groups which are used for various purposes. A person cannot log in as one of these "hidden" users. \
This structure of users and groups is used to provide security by restricting what data and operations each person or application can use. For example, many files belong to user "system" (also called "root") and group "wheel" so that non-privileged users can't modify them, thus protecting the computer system from accidental or malicious harm.\
The installer automatically gives administrators (users who are members of the "admin" group) membership in the two new groups, so that they can easily manipulate BOINC files. Non-admin users are denied direct access to these files (except through BOINC Manager), protecting BOINC and its projects files. This is particularly useful where many people have access to the computer, as in a school computer lab.\
\
BOINC projects are given permission to access only project files, protecting your computer in the event someone downloads bad software from a bogus project, or in the unlikely case that a legitimate project's server is infiltrated by a cracker.\
\
The BOINC Manager also blocks non-admin users' access to certain functions, such as Attach, Detach, Reset Project. BOINC permits a non-admin user to override this restriction by entering an administrator user name and password.\
For technical details of the implementation, please see {\field{\*\fldinst{HYPERLINK "http://boinc.berkeley.edu/trac/wiki/SandboxUser"}}{\fldrslt http://boinc.berkeley.edu/trac/wiki/SandboxUser}} and {\field{\*\fldinst{HYPERLINK "http://boinc.berkeley.edu/sandbox.php"}}{\fldrslt http://boinc.berkeley.edu/sandbox.php}}\
\f1\b0 users, not just the user who ran the installer. You can add or remove Login Items by using the Accounts Pane in the System Preferences (accessible from the Apple menu). (These items are called "Login Items" in OS 10.4 or "Startup Items" in OS 10.3.)\
\f1\b0 copy) BOINCManager to any folder you wish on the same disk drive or partition. If you do so, you will need to update the information in each user's Login Items. In most cases, the BOINC screen saver should still work properly. If it does not, move BOINCManager back to the