SPC (Security and Privacy Control)

[TMroy]

What is SPC?
SPC is the abbreviation of Security and Privacy Control, which is a newly added security control module in the TOS 6 system of TerraMaster. The main function of SPC is to ensure that all executable programs running in the system are legal programs authorized by users, so as to improve system security and reduce the risk of user data being attacked by hackers or ransomware.

How does SPC work?
SPC plays the role of a "Gatekeeper" in the TOS system. It sets up a barrier to verify user authorization for all executable programs that need to access TNAS network resources or storage space. Only after obtaining user authorization, can the program gain access permissions.

To achieve this goal, SPC takes the following measures:
1. Record the hash values of all default executable programs in the TOS system, and use digital signatures to distinguish these programs from other external programs. When SPC is enabled, these default executable programs will be automatically added to the white list and their hash values will be verified before running to prevent tampering. This means that unless the user manually adds an external program to the white list, malicious code and viruses will not be able to access sensitive resources of the system.
2. When SPC is enabled, when a user installs an application, SPC will pop up a window to ask the user whether to allow the application to access sensitive resources such as TNAS network resources and storage spaces. Only when the user authorizes the application's access permissions, will it be added to the white list. This greatly reduces the risk of hackers using application vulnerabilities to implant malicious code.
3. SPC also sets strict user authentication procedures to protect its own security. For both modifying the white list or adding applications, SPC has corresponding verification steps to ensure its own security.

It should be noted that SPC cannot block applications that carry malicious code themselves. Once an application is added to the white list, the malicious viruses it carries will also be added. Therefore, it is still important for users to download and use applications from secure and reliable sources.

What are the advantages of SPC?
Enabling SPC can significantly reduce the risk of hackers planting malicious code in TOS systems and applications, which can increase system security and data security levels by more than 10 times. This is very helpful for protecting important data stored in TNAS.

What are the disadvantages of SPC?
Although SPC can improve the security level of systems and data, it may bring additional burdens to some advanced users. For example, users who need to modify system configurations or customize functional modules need to manually add custom executable programs to the white list one by one. Otherwise, once SPC is enabled, these programs will not be able to access sensitive resources of the system. However, users have the option of enabling or disabling SPC if they do not require its security protection feature.

Who is SPC suitable for?
Although enabling TerraMaster's "Security Isolation Mode" can effectively block security threats from the internet, connecting the TNAS device to the internet may pose security risks to users who require remote access or set up services to support business operations. SPC can effectively reduce these security threats from the internet, and is therefore suitable for users who store important data and have to connect their devices to the internet.

How to enable SPC?
In the TOS 6 system, SPC is disabled by default. To enable SPC, please follow these steps:
1. Switch to the TOS 6 desktop;
2. Click on the “Control Panel” icon;
3. In the control panel, select the "General Settings > Security > SPC" tab, and check the "Enable" checkbox.

If you have installed some applications before enabling SPC, you will need to manually grant network resource and storage space access permissions to these applications after enabling SPC.

[baf28]

Sounds cool, I really want to try

[manya2000]

I tried SPC and it works well if you follow a few steps.
After applying SPC, system reboots and you have to go back and allow applications access to Network Services and Storage.
Then, I had to go back to App Center and Enable all the applications (Terra Photos, Docker, Portainer, etc.)

Everything works after Enabled, except I am having a problem enabling PLEX.
It just flashes: Operation Failed!

[usersky]

All this is great guys but please be serious with security. This kind of naive statement makes all the effort look not very serious:

"Enabling SPC can significantly reduce the risk of hackers planting malicious code in TOS systems and applications, which can increase system security and data security levels by more than 10 times."

10 times, really??

Good effort, childish wording. Otherwise I hardly wait to install TOS6!