boinc/mac_installer

{\rtf1\mac\ansicpg10000\cocoartf824\cocoasubrtf420
{\fonttbl\f0\fswiss\fcharset77 Helvetica-Bold;\f1\fswiss\fcharset77 Helvetica;\f2\fswiss\fcharset77 Helvetica-Oblique;
}
{\colortbl;\red255\green255\blue255;}
{\*\listtable{\list\listtemplateid1\listhybrid{\listlevel\levelnfc23\levelnfcn23\leveljc2\leveljcn2\levelfollow0\levelstartat1\levelspace360\levelindent0{\*\levelmarker \{disc\}}{\leveltext\leveltemplateid0\'02\'05.;}{\levelnumbers\'01;}}{\listname ;}\listid1}}
{\*\listoverridetable{\listoverride\listid1\listoverridecount0\ls1}}
\margl1440\margr1440\vieww9000\viewh9000\viewkind0
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\qc

\f0\b\fs28 \cf0 Macintosh BOINCManager Version <VER_NUM> Release Notes\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural

\f1\b0\fs24 \cf0 \
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\qc
\cf0 http://boinc.berkeley.edu/\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural
\cf0 \
Starting with version 5.5.4, BOINC features new, stricter security measures.  See the 
\f0\b Security
\f1\b0  section below for important information.\
\
This is a 
\f0\b universal binary
\f1\b0  which will run natively on both Intel and PowerPC Macs.  BOINCManager requires Macintosh OS X version 10.3 or greater.  \
\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural

\f0\b \cf0 Upgrade warning: You may lose unreported results
\f1\b0  if you are running on an 
\f0\b Intel Mac
\f1\b0  and upgrading from a version of BOINC earlier than 5.3.21 on an Intel Mac, or if you are transferring BOINC Data from a PowerPC Mac to an Intel Mac, or from an Intel Mac to a PowerPC Mac.  To prevent this, open BOINC Manager's window, select the 
\f2\i Projects
\f1\i0  tab, select each project and  press the 
\f2\i Update
\f1\i0  button.  Then select the 
\f2\i Tasks
\f1\i0  tab and make sure there are no tasks "Ready to report."\
\

\f0\b Setting BOINC as your screen saver:
\f1\b0  Although this installer adds the BOINC screen saver to your system, it does not change your screen saver settings.  To select BOINC as your screen saver, use the Screen Saver or Screen Effects panel in the System Preferences (accessible from the Apple menu).  \
\
It may take a minute after the screen saver starts before the science application graphics appear.  \
\
Note: on some versions of the Mac OS, you may not be able to exit the BOINC screen saver by moving the mouse; you may need to press the mouse button or press any key on the keyboard to exit.  \
\

\f0\b Security:\
\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural\pardirnatural

\f1\b0 \cf0 Version 5.5.4 of BOINC Manager for the Macintosh features new, stricter security measures.  This additional security helps protect your computer data from potential theft or accidental or malicious damage by limiting BOINC projects' access to your  system and data.  \
\
If you experience problems with this software, you can re-install a version of BOINC prior to  5.5.4; this will automatically revert ownership and permissions to the earlier  implementation.\
\
Once we have tested this security implementation on the Mac, we plan to extend it to other computer platforms, including Linux and Windows.\
\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural
\cf0 The installer sets special permission for the BOINCManager and Client, which allows them to write to the shared BOINC Data regardless of which user is logged in.  If you 
\f0\b copy
\f1\b0  BOINCManager or the BOINC core client without using the installer, it will not run properly.  \
\
However, you can safely 
\f0\b move
\f1\b0  the BOINC Manager within the same disk drive or partition.  If you need multiple copies, run the installer again after moving BOINC Manager; this will create a fresh copy in the 
\f0\b /Applications
\f1\b0  folder.\
\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural\pardirnatural
\cf0 BOINC verifies that ownership and permissions are set properly each time it is launched.  It will tell you to re-install BOINC if there is a problem.\
\
The new safeguards use the basic security protections built into UNIX (the base underlying Mac OS X): permissions and ownership.\
\
The administrator (usually the owner) of each computer creates one or more users who can log in, can create private files, and can share other files.  Some of these users are given administrative privileges, some may not have these privileges.\
\
There are also groups, which have one or more users as members.  For example, users with administrative privileges are usually members of the "admin" group.\
\
In addition to these "visible" users and groups, the operating system contains a number of "hidden" users and groups which are used for various purposes.  A person cannot log in as one of these "hidden" users.  \
\
This structure of users and groups is used to provide security by restricting what data and operations each person or application can use.  For example, many files belong to user "system" (also called "root") and group "wheel" so that non-privileged users can't modify them, thus protecting the computer system from accidental or malicious harm.\
\
Starting with version 5.5.4 of the BOINC Manager for the Macintosh, the BOINC installer creates 2 new "hidden" users 
\f0\b boinc_master
\f1\b0  and 
\f0\b boinc_project
\f1\b0 , and two new "hidden" groups, also named 
\f0\b boinc_master
\f1\b0  and 
\f0\b boinc_project
\f1\b0  (unless they were created by a previous installation of BOINC.)\
\
The installer automatically gives administrators (users who are members of the "admin" group) membership in the two new groups, so that they can easily manipulate BOINC files.  Non-admin users are denied direct access to these files (except through BOINC Manager), protecting BOINC and its projects files.  This is particularly useful where many people have access to the computer, as in a school computer lab.\
\
BOINC projects are given permission to access only project files, protecting your computer in the event someone downloads bad software from a bogus project, or in the unlikely case that a legitimate project's server is infiltrated by a cracker.\
\
The BOINC Manager also blocks non-admin users' access to certain functions, such as Attach, Detach, Reset Project.  BOINC permits a non-admin user to override this restriction by entering an administrator user name and password.\
\
For technical details of the implementation, please see \
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural\pardirnatural
{\field{\*\fldinst{HYPERLINK "http://boinc.berkeley.edu/sandbox.php"}}{\fldrslt \cf0 http://boinc.berkeley.edu/sandbox.php}}\
\
As of Version 5.5.4, the installer now sets BOINCManager as a Login item for 
\f0\b all
\f1\b0  users, not just the user who ran the installer.  You can add or remove Login Items by using the Accounts Pane in the System Preferences (accessible from the Apple menu).  (These items are called "Login Items" in OS 10.4 or "Startup Items" in OS 10.3.)\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural
\cf0 \
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural

\f0\b \cf0 Other useful information:
\f1\b0 \
\
The installer places two items onto your hard drive: BOINCManager.app in your 
\f0\b /Applications
\f1\b0  folder and BOINCSaver.saver in your 
\f0\b /Library/Screen Savers
\f1\b0  folder.  \
\
The installer creates the BOINC Data folder in your 
\f0\b /Library/Application Support
\f1\b0  folder.  If you have previously been running BOINC in a different folder, copy your data into this folder.  \
\
All users who log in on the same Macintosh will share one set of BOINC data, ensuring that work units are processed in the most timely manner.  \
\
You can move BOINCManager to any folder you wish.  If you do so, you will need to update the information in each user's Login Items.  In most cases, the BOINC screen saver should still work properly.  If it does not, move BOINCManager back to the 
\f0\b /Applications
\f1\b0  folder.\
\
You can move (
\f0\b not
\f1\b0  copy) BOINCManager to any folder you wish on the same disk drive or partition.  If you do so, you will need to update the information in each user's Login Items.  In most cases, the BOINC screen saver should still work properly.  If it does not, move BOINCManager back to the Applications folder.\
\
\pard\pardeftab720\ql\qnatural
\cf0 To completely remove (
\f0\b uninstall
\f1\b0 ) BOINC from your Macintosh:\
\pard\tx720\pardeftab720\ql\qnatural
\cf0 \'a5 There is no harm in leaving the "hidden" users 
\f0\b boinc_master
\f1\b0  and 
\f0\b boinc_project
\f1\b0  on your computer.  If you wish, you can remove them either by using the Applications/Utilities/NetInfo Manager application or by running the shell script 
\f0\b Mac_SA_Insecure.sh
\f1\b0 , which you can download from \
	{\field{\*\fldinst{HYPERLINK "http://boinc.berkeley.edu/mac_build/Mac_SA_Insecure.sh"}}{\fldrslt http://boinc.berkeley.edu/mac_build/Mac_SA_Insecure.sh}}\
\pard\tx720\tx1440\tx2160\tx2880\tx3600\tx4320\tx5040\tx5760\tx6480\tx7200\tx7920\tx8640\ql\qnatural\pardirnatural
\cf0 Note: this script must be run in the Terminal application 
\f2\i before
\f1\i0  deleting the 
\f0\b BOINC Data
\f1\b0  folder.\
\pard\tx720\pardeftab720\ql\qnatural
\cf0 \'a5 Move the following files to the trash:\
\pard\tx220\tx720\tx1440\pardeftab720\li720\fi-720\ql\qnatural
\ls1\ilvl0
\f0\b \cf0 {\listtext	\'a5	}BOINCManager.app
\f1\b0  (from your 
\f0\b /Applications/
\f1\b0  folder)\
\ls1\ilvl0
\f0\b {\listtext	\'a5	}BOINCSaver.saver
\f1\b0  (from your 
\f0\b /Library/Screen Savers/
\f1\b0  folder)\
{\listtext	\'a5	}the 
\f0\b BOINC Data/
\f1\b0  folder (from your 
\f0\b /Library/Applications Support/
\f1\b0  folder)\
\ls1\ilvl0
\f0\b {\listtext	\'a5	}[username]/Library/Preferences/BOINC Manager Preferences
\f1\b0 \
\pard\tx220\tx720\pardeftab720\li720\fi-720\ql\qnatural
\ls1\ilvl0\cf0 {\listtext	\'a5	}Open the 
\f0\b Accounts
\f1\b0  pane in the 
\f0\b System Preferences
\f1\b0  (accessible from the Apple menu), and remove BOINCManager from your list of 
\f0\b Login Items
\f1\b0  (or 
\f0\b Startup Items
\f1\b0  under OS 10.3.)\
{\listtext	\'a5	}Open 
\f0\b System Preferences
\f1\b0  from the Apple menu. Select 
\f0\b Desktop & Screen Saver
\f1\b0  and select a different screen saver.\
}