| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="security-secure-install-overview">
|
|---|
| 4 | <title>Installation Overview</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p>
|
|---|
| 8 | The <ph conkeyref="vbox-conkeyref-phrases/product-name"/> base package should be downloaded only from a
|
|---|
| 9 | trusted source, for instance the official website
|
|---|
| 10 | <ph>http://www.215389.xyz</ph>. The integrity of the
|
|---|
| 11 | package should be verified with the provided SHA256 checksum
|
|---|
| 12 | which can be found on the official website.
|
|---|
| 13 | </p>
|
|---|
| 14 | <p> General <ph conkeyref="vbox-conkeyref-phrases/product-name"/> installation instructions for the supported hosts can be found in <xref href="installation.dita"/>. </p>
|
|---|
| 15 | <p>
|
|---|
| 16 | On Windows hosts, the installer can be used to disable USB
|
|---|
| 17 | support, support for bridged networking, support for host-only
|
|---|
| 18 | networking and the Python language binding. See
|
|---|
| 19 | <xref href="installation_windows.dita">Installing on Windows Hosts</xref>. All these features are
|
|---|
| 20 | enabled by default but disabling some of them could be
|
|---|
| 21 | appropriate if the corresponding functionality is not required
|
|---|
| 22 | by any virtual machine. The Python language bindings are only
|
|---|
| 23 | required if the <ph conkeyref="vbox-conkeyref-phrases/product-name"/> API is to be used by external
|
|---|
| 24 | Python applications. In particular USB support and support for
|
|---|
| 25 | the two networking modes require the installation of Windows
|
|---|
| 26 | kernel drivers on the host. Therefore disabling those selected
|
|---|
| 27 | features can not only be used to restrict the user to certain
|
|---|
| 28 | functionality but also to minimize the surface provided to a
|
|---|
| 29 | potential attacker.
|
|---|
| 30 | </p>
|
|---|
| 31 | <p>
|
|---|
| 32 | The general case is to install the complete <ph conkeyref="vbox-conkeyref-phrases/product-name"/>
|
|---|
| 33 | package. The installation must be done with system privileges.
|
|---|
| 34 | All <ph conkeyref="vbox-conkeyref-phrases/product-name"/> binaries should be executed as a regular user
|
|---|
| 35 | and never as a privileged user.
|
|---|
| 36 | </p>
|
|---|
| 37 | <p> The <ph conkeyref="vbox-conkeyref-phrases/vbox-ext"/> provides additional features and must be downloaded and installed separately, see <xref href="install-ext-pack.dita"/>. As for the base package, the SHA256 checksum of the extension pack should be verified. As the installation requires system privileges, <ph conkeyref="vbox-conkeyref-phrases/product-name"/> will ask for the system password during the installation of the extension pack. </p>
|
|---|
| 38 | </body>
|
|---|
| 39 |
|
|---|
| 40 | </topic>
|
|---|
