Users and access

Local accounts

mvmOS supports local users for an installation. User and session information belongs to the server running mvmOS; it is not synchronised to mvmos.org as part of normal Core operation.

Access responsibilities

• Create only the accounts your installation needs.
• Use strong passwords and protect the server’s administrator access.
• Remove accounts that no longer need access.
• Keep the operating system and mvmOS updated.

Sessions and administration

Administrative actions should be limited to trusted users. If your installation is exposed to the internet, place it behind HTTPS and use the network controls appropriate for your environment.