Scott Roberts wrote:
New to linux and was wondering what is the best
practice for choosing a user and group for running
applications? Is running an app as root the normal
thing to do?
no
Is running apps as root a bad thing?
yes
Huge
security risk?
yes
Sorry for the stupid question but have
seen different docs saying what to run a directory as.
The RH docs say if you want to run directory on
default ports run as root. Thats what I plan to do.
This refers to starting the DS, but the DS is configured to run as
another user/group. When the DS starts up it opens the ports it
requires and then changes to the configured user/group in order that
under normal running conditions it has a lower security profile.
Starting the DS as root is required to open ports 389 and 636, the
designated LDAP and LDAPS ports, but please do configure the server to
switch to a user/group which you have created specifically for the DS.
--
Pete