Knowledge Discovery 26.3
Getting Started Guide

# Security Best Practices

- Keep Knowledge Discovery Up to Date. New releases may include security updates, including updates to third-party libraries.
- Run Knowledge Discovery with Minimal Privileges. In the event that a malicious actor causes Knowledge Discovery to behave dangerously, the potential damage is limited if Knowledge Discovery components are running with minimal privileges. There is no need to run Knowledge Discovery with administrative privileges.
- Protect the Application Directory. Knowledge Discovery installation directories contain libraries and other files that are necessary for normal operation. If a malicious actor tampers with these files, they might cause Knowledge Discovery to behave dangerously. You can set directory permissions to allow access only to trusted users.
- PATH and LD_LIBRARY_PATH should not include temporary directories, or directories where Knowledge Discovery is permitted to write output, because this creates a potential security vulnerability. ACI servers can, by default, write output to the `output` subdirectory of the directory where the server is running (see the `AllowedOutputDirectoryCSVs` parameter).

Copyright 2026 Open Text
Version 26.3 | Last updated July 2026

Send documentation feedback

Close

Send documentation feedback

To send feedback using your default email client, open an email window.

Otherwise, send your feedback and the information below to MFI-swpdl.idoldocsfeedback@opentext.com.

We appreciate your feedback!

Product: Knowledge Discovery 26.3

Topic Title: Security Best Practices