From: BuddyFriendGuy Date: Wed, 8 Apr 2015 06:27:24 +0000 (+0000) Subject: BuddyFriendGuy created page: privacy and security X-Git-Url: https://git.rm.cloudns.org/?a=commitdiff_plain;h=2ff24b524686fb40acfb43afe624878f38a17565;p=xonotic%2Fxonotic.wiki.git BuddyFriendGuy created page: privacy and security --- diff --git a/privacy-and-security.markdown b/privacy-and-security.markdown new file mode 100644 index 0000000..7b171ca --- /dev/null +++ b/privacy-and-security.markdown @@ -0,0 +1,13 @@ +Privacy and Security +==================== +Xonitic runs on top of the DarkPlaces Engine. When connecting to a server, the client may download and run QuakeC code for the gameplay. The security policies are: + +- QC code can't create any symlinks. +- QC code can read anything below ~/.xonotic/*/ including stuff pointed-to by symlinks (which, as the game can't create any, would have to have been placed by the user). It can't read your private key in ~/.xonotic/*.d0si. +- QC code can write anything below ~/.xonotic/data including your config. +- Paths are properly sanitized according to this policy. +- QC code can send arbitrary data back anywhere (by using the "connect" command). + +Reference +--------- +divVerent's [answer](http://forums.xonotic.org/showthread.php?tid=5427&pid=71595#pid71595) in the forum \ No newline at end of file