search

qbittorrent / qBittorrent

qBittorrent BitTorrent client
https://www.qbittorrent.org
Other
26.95k stars 3.88k forks source link

Run the app under highly restricted usercontext to open ports safely. #20552

Open ghost opened 6 months ago

ghost commented 6 months ago

Suggestion

Run the app under highly restricted usercontext to open ports safely.

Use case

Open ports safely.

Extra info/examples/attachments

Automatically run the app under highly restricted microsoft Virtual Service Account where this account will have absolutely no read write access to anything in the OS except the files it needs to write and read for torrenting and logs.

I've done this in the past for FTP server where I uploaded backups and stuff for safekeeping so I know it works.

ghost commented 6 months ago

OK the sMSA still has access to some things. The goal is to limit this GUI app even further.

"run as limited user" ?