Steve Quezadas wrote: > Should instiki run as root? Or should I load the instiki daemon as a > unprivileged user? Doesn't say anything in the docs. > > I am using inistki 10.2
The answer to the question "Should X run as root?" is _almost always_ no, and doubly so if that service is network-facing. If for any reason a service running as root is compromised, the attacker gains unlimited access to your system. On the other hand, a service running as a one-off unprivileged user with limited access rights is a much smaller potential risk. -- John _______________________________________________ Instiki-users mailing list [email protected] http://rubyforge.org/mailman/listinfo/instiki-users
