UserID 65535
TL;DR
- UserID 65535 is an unprivileged user in containerized environments.
Services Running with UserID 65535
Running services with UserID 65535 (non-root) is a security measure to reduce the potential impact of a compromised service.
Impact
- Reduced privileges: The service runs with limited permissions, similar to a regular user account [5].
- Improved security: Prevents the service from accessing or modifying system-critical files and settings.
- Isolation: Helps contain potential security breaches by limiting the service's access to other parts of the system.
- Compatibility considerations: Some applications may assume root privileges and need to be adapted to work with a non-root user ID.
Best Practices
- Ensure the service has the necessary permissions to perform its required tasks without excess privileges.
- Use additional security measures like SELinux or AppArmor for further access control.
What next?
Consider reading up on: