iDRAC9 Security Configuration Guide

Non-Root Support

iDRAC9 firmware ensures that all internal processes running inside iDRAC run with the least-required privileges, a core security concept. This approach provides protection against programming flaws, intrusion attempts, and malware. This protection ensures that the process of a system that might get attacked cannot access files or hardware that are outside the scope of that process. For example, the process that provides Virtual KVM support should not be able to change fan speeds. Running these two processes as different users helps protect the system by preventing attacks from propagating from one process to another.