To secure the RIPs, you could put the Mac behind a proxy server or remove it from the Internet. There are no plans at this time for a new version of Splash, so it will continue to run as admin.
A concern has been raised with EFI that the Splash software needs to run as a local administrator on the RIP’s. Their response was that running the software under a non-admin account isn’t supported however this is an unacceptable security risk to the organisation.
Users need to be able to calibrate the printers daily and check the status of their jobs but shouldn’t have access to make changes to the configuration or have permissions which would allow them to inadvertently delete files or profiles.
What is Xerox’s recommendation to secure the RIP’s and will a future release of the Splash software offer support to run the application as a standard user account?