Scott Roberts wrote:
New to linux and was wondering what is the best practice for choosing a user and group for running applications? Is running an app as root the normal thing to do?
no
Is running apps as root a bad thing?
yes
Huge security risk?
yes
This refers to starting the DS, but the DS is configured to run as another user/group. When the DS starts up it opens the ports it requires and then changes to the configured user/group in order that under normal running conditions it has a lower security profile. Starting the DS as root is required to open ports 389 and 636, the designated LDAP and LDAPS ports, but please do configure the server to switch to a user/group which you have created specifically for the DS.Sorry for the stupid question but have seen different docs saying what to run a directory as. The RH docs say if you want to run directory on default ports run as root. Thats what I plan to do.
-- Pete
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
