Why run as special user?

Discussion of Transmission that doesn't fit in the other categories
Post Reply
Takla
Posts: 2
Joined: Wed Feb 04, 2009 1:24 am

Why run as special user?

Post by Takla »

I'm curious as to why it's recommended to run transmission, or specifically transmission-daemon, under a specially created user? I appreciate that running it as root is foolish but what is the specific reasoning behind recommending not running as regular unprivileged user? I'm really struggling to see what the problem or advantage could be.

Thanks.
Takla
Posts: 2
Joined: Wed Feb 04, 2009 1:24 am

Re: Why run as special user?

Post by Takla »

Nobody knows?
Jethryn Freyman
Posts: 695
Joined: Wed Oct 31, 2007 6:11 am
Location: Australia

Re: Why run as special user?

Post by Jethryn Freyman »

I haven't heard this recommended, but I haven't read the documentation either. Which OS are you using?
godsyn
Posts: 36
Joined: Mon Mar 31, 2008 10:10 pm

Re: Why run as special user?

Post by godsyn »

Running any daemon, much less one that is in development, with more permissions than necessary, is poor form. Apache is ran as apache (or httpd, pending disrto), same with mysql, mail, syslog, sshd, etc. etc. This is just another daemon, and as such, should be ran with minimal permissions. It isn't saying "our application isn't secure", but, "we can not see every possible result, so do yourself a favor and make it more complicated should someone obtain access".

It is just an ounce of prevention.
Post Reply