Hi All,
Please accept my apologies in advance if this has been asked before. I've spent some serious time using search, but couldn't find an answer.
I'm running 0.7.13 as a service on Windows 7 Home Premium. It works just fine, but I need it to be able to access network shares. Currently the service runs under the Local System context which denies acces to resources outside the computer. That's fine, because that's what the Local System is for.
I want to create a new service account for the sabnzbd service, and I'd like to do it just right by applying the principle of least privilege. I don't like the idea of having this service running with admin privileges as this would open up my entire network in case of a hole in sabnzbd. The problem is, I'm unable to determine the requirements for sabnzbd as a service. Could anyone give me some info on that?
Thanks in advance,
Stumpie
Windows Service Privileges
Forum rules
Help us help you:
Help us help you:
- Are you using the latest stable version of SABnzbd? Downloads page.
- Tell us what system you run SABnzbd on.
- Adhere to the forum rules.
- Do you experience problems during downloading?
Check your connection in Status and Interface settings window.
Use Test Server in Config > Servers.
We will probably ask you to do a test using only basic settings. - Do you experience problems during repair or unpacking?
Enable +Debug logging in the Status and Interface settings window and share the relevant parts of the log here using [ code ] sections.
Re: Windows Service Privileges
The SABnzbd service can run under any user account, as long as you make sure that it has
the privilege to access the right data folders.
However, the SABHelper function must run under Local System,
otherwise it cannot control the SABnzbd main service.
the privilege to access the right data folders.
However, the SABHelper function must run under Local System,
otherwise it cannot control the SABnzbd main service.
Re: Windows Service Privileges
Ah! Thanks.
Stumpie
Stumpie

