Changeset 41922 in vbox for trunk

Timestamp:

Jun 27, 2012 12:01:57 PM (13 years ago)

Author:

vboxsync

Message:

doc/manual: document that remote guest users have potentially the same level of access to shared resources like local guest users; also document that the shared clipboard is disabled by default for that reason

Location:

trunk/doc/manual/en_US

Files:

• user_BasicConcepts.xml (modified) (1 diff)
• user_Security.xml (modified) (2 diffs)

trunk/doc/manual/en_US/user_BasicConcepts.xml

@@ -386 +386 @@
               otherwise; see <xref linkend="guestadditions" /> for
               details.</para>
+
+            <para>The shared clipboard is disabled by default. See
+              <xref linkend="security_clipboard"/> for an explanation.</para>
             </glossdef>
           </glossentry>

trunk/doc/manual/en_US/user_Security.xml

@@ -212 +212 @@
       </sect3>
 
-      <sect3>
+      <sect3 id="security_clipboard">
         <title>Clipboard</title>
         <para>
@@ -219 +219 @@
           the guest to read and write the host clipboard. The "Host to guest"
           mode and the "Guest to host" mode limit the access to one
-          direction. If the guest is able to access the host clipboard it
+          direction. If the guest is able to access the host clipboard, it
           could also access sensitive data from the host which is shared over
           the clipboard.
+        </para>
+        <para>
+          If the guest is able to read and/or write the host clipboard then
+          a remote user which is connected to the guest over the network has
+          the same level of access like a local guest user which is sometimes
+          not desired. As a consequence, the shared clipboard is disabled for
+          new VMs.
+        </para>
+      </sect3>
+
+      <sect3>
+        <title>Shared folders</title>
+        <para>If any folder of the host is shared with the guest, a remote
+          user which is connected to the guest over the network can access
+          these files too as VirtualBox cannot distinguish between local
+          guest users and remote guest users in that case.
         </para>
       </sect3>