logoalt Hacker News

HarlequinHairtoday at 3:44 AM1 replyview on HN

There are substantial differences.

For one, as non-root user you are tied to the permissions system and can't access most of the data. If one of your services (let's say sql) get hacked, they are tied to sql user, and unless the achieve privilege escalation, they can't mangle with other services data (eg webserver).

Also network wide, a non-root user can't use different protocol than tcp and udp. The only reason you can ping as a regular user is because of the setuid on the ping program, otherwise icmp is not allowed to non-root users.

There are of course other reasons, but these are some examples on how it would be different.


Replies

orangeatoday at 3:50 AM

I think you're just illustrating my point. Those concerns don't apply to personal computers and they don't stop an intruder from doing anything they might practically want to do for gain. Like installing ransomware, participating in a botnet, exfiltrating personal files/browser cookies/etc (all accessible as non-root!), ...

show 1 reply