[#JRA-14512] recommend that the default user which invokes JIRA not be a system account such as root

JIRA

recommend that the default user which invokes JIRA not be a system account such as root

Created: 24/Feb/08 06:03 PM Updated: 27/Feb/08 04:18 PM

Component/s:

Documentation

Affects Version/s:

None

Fix Version/s:

3.12.2

Time Tracking:

Not Specified

Environment:

Installing JIRA on linux

Participants:	Andrew Lui [Atlassian], Karl Katzke and Peter White [Atlassian]
Since last comment:	32 weeks, 2 days ago
Resolution Date:	27/Feb/08 04:18 PM
Labels:

Description

« Hide

Can we please bring this point into the main JIRA installation documentation trunk. Maybe insert it here, at Point 2. ?

specifically:

Creating a jira system account

As JIRA runs as the user it is invoked under, and therefore can potentially be abused, it is a good idea to create a dedicated user to run JIRA. For example under linux:

$ sudo /usr/sbin/useradd --create-home --home-dir /usr/local/jira --shell /bin/bash jira

All

Comments

Work Log

Change History

Sort Order:

[ Permlink | « Hide ]

Karl Katzke added a comment - 24/Feb/08 06:34 PM

Another good location to mention this is the JIRA Standalone startup documentation <a href="http://www.atlassian.com/software/jira/docs/latest/install.html">here</a> ...

Personally, I would create a section on running JIRA standalone as a service under linux on that same page.

This really is a large security risk for your users. I hope this gets addressed very quickly.