nobody user

0001-01-01

On Linux and Unix-like systems, a user account named “nobody” is likely to exist. The nobody user is conventionally used to represent a user who owns no files, isn’t a member of any groups, and has no additional privileges beyond those posessed by every other user of the system.

It was common for daemons to run as nobody as a cybersecurity measure in order to mitigate damage caused in the event of exploitation. The attacker may be successful, but they will have limited abilities on the system. Use of the nobody user becomes less and less effective as more software utilizes it; the more software using nobody running increases the damage caused by the initial attack and the attackable surface for subsequent attacks. As such, in a contemporary setting, each piece of software that typically runs as a daemon will often have its own separate user to compartmentalize security on a system.

https://en.wikipedia.org/wiki/Nobody_(username)


Links to this note