dynaTrace process on unix
dynaTrace components like dTServer and dTCollector run as root in the unix boxes. Now due to this there can be security issues and we need to change this behaviour so it runs with a dTuser rather than root.
Any help in this regard would be highly appreciated.
Hi,
I'm assuming you set up the init scripts in init.d for the services to start automatically with the host. Please refer to the documentation if you need more help with this.
- Change permissions on the dynatrace directory recursively so the service account can read/write execute throughout. Example: chmod 755 -R /opt/dynatrace/ dynatrace:dynatrace
- go to each dynaTrace* script in /etc/init.d/ and change this line:
$DT_HOME/$DT_BINARY -bg $DT_OPTARGS
to this:
su - $SERVERUSER -c "$DT_HOME/$DT_BINARY -bg $DT_OPTARGS"
replacing "$SERVERUSER" with your service account or else setting the variable properly at the beginning of the script with the other variables.
Thanks,
Rick B
Thanks Richard. I will try and test this and let you know.
Hi Arjun, Just out of curiousity .. what security issues that you are concerned about when DynaTrace running as root ?
Thanks
HariKumar Alampuru
