Steve Quezadas wrote:> Should instiki run as root? Or should I load the instiki daemon as a
> unprivileged user? Doesn''t say anything in the docs.
>
> I am using inistki 10.2
The answer to the question "Should X run as root?" is _almost always_
no, and doubly so if that service is network-facing. If for any
reason a service running as root is compromised, the attacker gains
unlimited access to your system. On the other hand, a service
running as a one-off unprivileged user with limited access rights is
a much smaller potential risk.
-- John