Should instiki run as root?

Should instiki run as root? Or should I load the instiki
daemon as a 
unprivileged user? Doesn't say anything in the docs.

I am using inistki 10.2

- Steve

_______________________________________________
Instiki-users mailing list
Instiki-usersrubyforge.org
h
ttp://rubyforge.org/mailman/listinfo/instiki-users

  Steve Quezadas wrote:
> Should instiki run as root? Or should I load the
instiki daemon as a
> unprivileged user? Doesn't say anything in the docs.
>
> I am using inistki 10.2

The answer to the question "Should X run as
root?" is _almost always_  
no, and doubly so if that service is network-facing.  If for
any  
reason a service running as root is compromised, the
attacker gains  
unlimited access to your system.  On the other hand, a
service  
running as a one-off unprivileged user with limited access
rights is  
a much smaller potential risk.

-- John


_______________________________________________
Instiki-users mailing list
Instiki-usersrubyforge.org
h
ttp://rubyforge.org/mailman/listinfo/instiki-users