Knowledge Discovery 25.4
Getting Started Guide

# Security Best Practices

- Keep Knowledge Discovery Up to Date. New releases may include security updates, including updates to third-party libraries.
- Run Knowledge Discovery with Minimal Privileges. In the event that a malicious actor causes Knowledge Discovery to behave dangerously, the potential damage is limited if Knowledge Discovery components are running with minimal privileges. There is no need to run Knowledge Discovery with administrative privileges.
- Protect the Application Directory. Knowledge Discovery installation directories contain libraries and other files that are necessary for normal operation. If a malicious actor tampers with these files, they might cause Knowledge Discovery to behave dangerously. You can set directory permissions to allow access only to trusted users.
- PATH and LD_LIBRARY_PATH should not include temporary directories, or directories where Knowledge Discovery is permitted to write output, because this creates a potential security vulnerability. ACI servers can, by default, write output to the `output` subdirectory of the directory where the server is running (see the `AllowedOutputDirectoryCSVs` parameter).
- (Media Server) Specify input and output directories. Media Server can, by default, read from any accessible local file system or network share, and write to any directory. This behavior is deprecated and might change in a future release; with the current version of Media Server you can improve security by setting the parameters `AllowedInputDirectories` and `AllowedEngineOutputDirectories` in the `[Paths]` section of the Media Server configuration file. Setting these parameters ensures that Media Server can only read from, and write to, specified directories and their subdirectories. The default configuration file supplied with Media Server sets these parameters, but if you are upgrading from an earlier version you might need to set them yourself.

Copyright 2025 Open Text
Version 25.4 | Last updated October 2025

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery 25.4

Topic Title: Security Best Practices