>I feel safer running The Clerk (the underlying dataserver) as root
>because then only one password has access to the data files.
I haven't used your software so maybe I've got the wrong end of the stick -
but if anyone other than root can cause effect to a process (cause it to
run, effect data that it reads etc.) that you run as root then I'd consider
that a potential security rule.
On the whole - never run anything as root unless you absolutely have to -
create new users as required who can only do the things that need to be
done for that task.
Manar
References:
|
|