dynaTrace process on unix
dynaTrace components like dTServer and dTCollector run as root in the unix boxes. Now due to this there can be security issues and we need to change this behaviour so it runs with a dTuser rather than root.
Any help in this regard would be highly appreciated.
Hi,
I'm assuming you set up the init scripts in init.d for the services to start automatically with the host. Please refer to the documentation if you need more help with this.
- Change permissions on the dynatrace directory recursively so the service account can read/write execute throughout. Example: chmod 755 -R /opt/dynatrace/ dynatrace:dynatrace
- go to each dynaTrace* script in /etc/init.d/ and change this line:
$DT_HOME/$DT_BINARY -bg $DT_OPTARGS
to this:
su - $SERVERUSER -c "$DT_HOME/$DT_BINARY -bg $DT_OPTARGS"
replacing "$SERVERUSER" with your service account or else setting the variable properly at the beginning of the script with the other variables.
Thanks,
Rick B
Thanks Richard. I will try and test this and let you know.
Hi Arjun, Just out of curiousity .. what security issues that you are concerned about when DynaTrace running as root ?
Thanks
HariKumar Alampuru
Welcome the
Dynatrace Community Forums
Check out the Forum User Guide and Forum Guidelines to learn how to get started.Community Member of the Month
August 2017
Announcing Dynatrace's Community Member of the Month for August 2017, Rick B.! Click here to read more! 