Bitcoin Forum
December 09, 2016, 06:09:15 AM *
News: Latest stable version of Bitcoin Core: 0.13.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Security advantage to run Bitcoin daemon as something else other than root  (Read 1460 times)
Chick
Member
**
Offline Offline

Activity: 70


View Profile
July 02, 2011, 09:48:58 PM
 #1

I'm setting up an sever dedicated for the Bitcoin daemon to start storing my Bitcoins. I just wanted to know if there were any security advantages to run the daemon as another user other than root. Since the daemon will be the only thing running on the system, I don't see why not?

The only way anybody will be connecting to the server is via an internal IP through json-rpc api calls.

Thanks

1481263755
Hero Member
*
Offline Offline

Posts: 1481263755

View Profile Personal Message (Offline)

Ignore
1481263755
Reply with quote  #2

1481263755
Report to moderator
1481263755
Hero Member
*
Offline Offline

Posts: 1481263755

View Profile Personal Message (Offline)

Ignore
1481263755
Reply with quote  #2

1481263755
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481263755
Hero Member
*
Offline Offline

Posts: 1481263755

View Profile Personal Message (Offline)

Ignore
1481263755
Reply with quote  #2

1481263755
Report to moderator
kokjo
Legendary
*
Offline Offline

Activity: 1050

You are WRONG!


View Profile
July 02, 2011, 09:55:31 PM
 #2

the light over this:
root is a administrative user, and should not be used, unless the powers of being root is necessary.

it is really very simple to make another user:
Code:
adduser <username>

but in this case a cant see why you cant use root. but don't do it anyway

"The whole problem with the world is that fools and fanatics are always so certain of themselves and wiser people so full of doubts." -Bertrand Russell
qwk
Donator
Legendary
*
Offline Offline

Activity: 1316


Bitcoin Foundation Member


View Profile WWW
July 02, 2011, 10:02:32 PM
 #3

I just wanted to know if there were any security advantages to run the daemon as another user other than root. Since the daemon will be the only thing running on the system, I don't see why not?

Return question: where is the advantage in running it as root? I don't see why?

Generally, it is always a good idea to run services with the minimal privileges required. Just good, common practice.

Yeah, well... I'm gonna go build my own blockchain, with blackjack and hookers. In fact, forget the blockchain!
Chick
Member
**
Offline Offline

Activity: 70


View Profile
July 02, 2011, 10:03:05 PM
 #4

the light over this:
root is a administrative user, and should not be used, unless the powers of being root is necessary.

it is really very simple to make another user:
Code:
adduser <username>

but in this case a cant see why you cant use root. but don't do it anyway

I'm not talking about the simplicity of creating another user on the system. I just don't see a reason not to host the daemon on root because I don't see any reason to do so.

But I don't believe the Bitcoin daemon needs any administrative powers, so I'll go ahead and make an account for it.

Thanks

JoelKatz
Legendary
*
Offline Offline

Activity: 1386


Democracy is vulnerable to a 51% attack.


View Profile WWW
July 02, 2011, 10:34:29 PM
 #5

I'm not talking about the simplicity of creating another user on the system. I just don't see a reason not to host the daemon on root because I don't see any reason to do so.
If the daemon runs as root, someone who compromises the daemon can also load a kernel module to hide his tracks, modify system log files, and so on. I admit, it's a small issue, since if he can steal your wallet, the rest doesn't much matter.

I am an employee of Ripple.
1Joe1Katzci1rFcsr9HH7SLuHVnDy2aihZ BM-NBM3FRExVJSJJamV9ccgyWvQfratUHgN
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!