[tor-bugs] #10027 [Tor]: Tor Windows service should be installed with the NetworkService account

[Tor Bug Tracker & Wiki]

#10027: Tor Windows service should be installed with the NetworkService account
-----------------------+------------------------------
 Reporter:  arma       |          Owner:
     Type:  defect     |         Status:  new
 Priority:  Medium     |      Milestone:  Tor: 0.2.???
Component:  Tor        |        Version:
 Severity:  Normal     |     Resolution:
 Keywords:  tor-relay  |  Actual Points:
Parent ID:             |         Points:
  Sponsor:             |
-----------------------+------------------------------
Changes (by bugzilla):

 * severity:   => Normal


Comment:

 Why is it a defect?
 Why NetworkService? It's not about the network. It's "Microsoft network" (
 or domain).

 LocalService vs NetworkService:
 The principals differ in how they handle a service's attempts to access
 resources on other Windows computers on the network. A service running
 under NetworkService is authenticated to other computers on the network by
 using the computer's account in the domain.
 (ref.: windowsitpro.com/systems-management/understanding-local-service-
 and-network-service-accounts)

 It has minimum privileges on the local computer and acts as the computer
 on the network... A service that runs in the context of the NetworkService
 account presents the computer's credentials to remote Windows servers.
 (official: https://msdn.microsoft.com/en-
 us/library/windows/desktop/ms684272%28v=vs.85%29.aspx)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10027#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online