Bitcoin Forum
November 19, 2017, 04:42:50 PM *
News: Latest stable version of Bitcoin Core: 0.15.1  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: Security advantage to run Bitcoin daemon as something else other than root  (Read 1579 times)
Chick
Member
**
Offline Offline

Activity: 70


View Profile
July 02, 2011, 09:48:58 PM
 #1

I'm setting up an sever dedicated for the Bitcoin daemon to start storing my Bitcoins. I just wanted to know if there were any security advantages to run the daemon as another user other than root. Since the daemon will be the only thing running on the system, I don't see why not?

The only way anybody will be connecting to the server is via an internal IP through json-rpc api calls.

Thanks

1511109770
Hero Member
*
Offline Offline

Posts: 1511109770

View Profile Personal Message (Offline)

Ignore
1511109770
Reply with quote  #2

1511109770
Report to moderator
1511109770
Hero Member
*
Offline Offline

Posts: 1511109770

View Profile Personal Message (Offline)

Ignore
1511109770
Reply with quote  #2

1511109770
Report to moderator
Join ICO Now Coinlancer is Disrupting the Freelance marketplace!
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1511109770
Hero Member
*
Offline Offline

Posts: 1511109770

View Profile Personal Message (Offline)

Ignore
1511109770
Reply with quote  #2

1511109770
Report to moderator
1511109770
Hero Member
*
Offline Offline

Posts: 1511109770

View Profile Personal Message (Offline)

Ignore
1511109770
Reply with quote  #2

1511109770
Report to moderator
kokjo
Legendary
*
Offline Offline

Activity: 1050

You are WRONG!


View Profile
July 02, 2011, 09:55:31 PM
 #2

the light over this:
root is a administrative user, and should not be used, unless the powers of being root is necessary.

it is really very simple to make another user:
Code:
adduser <username>

but in this case a cant see why you cant use root. but don't do it anyway

"The whole problem with the world is that fools and fanatics are always so certain of themselves and wiser people so full of doubts." -Bertrand Russell
qwk
Donator
Legendary
*
Offline Offline

Activity: 1596


Bitcoin Foundation Member


View Profile WWW
July 02, 2011, 10:02:32 PM
 #3

I just wanted to know if there were any security advantages to run the daemon as another user other than root. Since the daemon will be the only thing running on the system, I don't see why not?

Return question: where is the advantage in running it as root? I don't see why?

Generally, it is always a good idea to run services with the minimal privileges required. Just good, common practice.

Yeah, well... I'm gonna go build my own blockchain, with blackjack and hookers. In fact, forget the blockchain!
Chick
Member
**
Offline Offline

Activity: 70


View Profile
July 02, 2011, 10:03:05 PM
 #4

the light over this:
root is a administrative user, and should not be used, unless the powers of being root is necessary.

it is really very simple to make another user:
Code:
adduser <username>

but in this case a cant see why you cant use root. but don't do it anyway

I'm not talking about the simplicity of creating another user on the system. I just don't see a reason not to host the daemon on root because I don't see any reason to do so.

But I don't believe the Bitcoin daemon needs any administrative powers, so I'll go ahead and make an account for it.

Thanks

JoelKatz
Legendary
*
Offline Offline

Activity: 1582


Democracy is vulnerable to a 51% attack.


View Profile WWW
July 02, 2011, 10:34:29 PM
 #5

I'm not talking about the simplicity of creating another user on the system. I just don't see a reason not to host the daemon on root because I don't see any reason to do so.
If the daemon runs as root, someone who compromises the daemon can also load a kernel module to hide his tracks, modify system log files, and so on. I admit, it's a small issue, since if he can steal your wallet, the rest doesn't much matter.

I am an employee of Ripple. Follow me on Twitter @JoelKatz
1Joe1Katzci1rFcsr9HH7SLuHVnDy2aihZ BM-NBM3FRExVJSJJamV9ccgyWvQfratUHgN
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!