| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="security-secure-install-overview">
|
|---|
| 4 | <title>Installation Overview</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p>
|
|---|
| 8 | The <ph conkeyref="vbox-conkeyref-phrases/product-name"/> base package should be downloaded only from a
|
|---|
| 9 | trusted source, for instance the official website
|
|---|
| 10 | <ph>http://www.virtualbox.org</ph>. The integrity of the
|
|---|
| 11 | package should be verified with the provided SHA256 checksum
|
|---|
| 12 | which can be found on the official website.
|
|---|
| 13 | </p>
|
|---|
| 14 | <p>
|
|---|
| 15 | General <ph conkeyref="vbox-conkeyref-phrases/product-name"/> installation instructions for the
|
|---|
| 16 | supported hosts can be found in <xref href="installation.dita">Installation Details</xref>.
|
|---|
| 17 | </p>
|
|---|
| 18 | <p>
|
|---|
| 19 | On Windows hosts, the installer can be used to disable USB
|
|---|
| 20 | support, support for bridged networking, support for host-only
|
|---|
| 21 | networking and the Python language binding. See
|
|---|
| 22 | <xref href="installation_windows.dita">Installing on Windows Hosts</xref>. All these features are
|
|---|
| 23 | enabled by default but disabling some of them could be
|
|---|
| 24 | appropriate if the corresponding functionality is not required
|
|---|
| 25 | by any virtual machine. The Python language bindings are only
|
|---|
| 26 | required if the <ph conkeyref="vbox-conkeyref-phrases/product-name"/> API is to be used by external
|
|---|
| 27 | Python applications. In particular USB support and support for
|
|---|
| 28 | the two networking modes require the installation of Windows
|
|---|
| 29 | kernel drivers on the host. Therefore disabling those selected
|
|---|
| 30 | features can not only be used to restrict the user to certain
|
|---|
| 31 | functionality but also to minimize the surface provided to a
|
|---|
| 32 | potential attacker.
|
|---|
| 33 | </p>
|
|---|
| 34 | <p>
|
|---|
| 35 | The general case is to install the complete <ph conkeyref="vbox-conkeyref-phrases/product-name"/>
|
|---|
| 36 | package. The installation must be done with system privileges.
|
|---|
| 37 | All <ph conkeyref="vbox-conkeyref-phrases/product-name"/> binaries should be executed as a regular user
|
|---|
| 38 | and never as a privileged user.
|
|---|
| 39 | </p>
|
|---|
| 40 | <p>
|
|---|
| 41 | The <ph conkeyref="vbox-conkeyref-phrases/vbox-ext"/> provides additional features
|
|---|
| 42 | and must be downloaded and installed separately, see
|
|---|
| 43 | <xref href="intro-installing.dita">Installing <ph conkeyref="vbox-conkeyref-phrases/product-name"/> and Extension Packs</xref>. As for the base package, the
|
|---|
| 44 | SHA256 checksum of the extension pack should be verified. As the
|
|---|
| 45 | installation requires system privileges, <ph conkeyref="vbox-conkeyref-phrases/product-name"/> will ask
|
|---|
| 46 | for the system password during the installation of the extension
|
|---|
| 47 | pack.
|
|---|
| 48 | </p>
|
|---|
| 49 | </body>
|
|---|
| 50 |
|
|---|
| 51 | </topic>
|
|---|
