4 ms·
There is a difference between not bringing in additional security and bringing anti-security. In my eyes, you are doing the latter. Your default examples eleva
by q3k 11y ago
There is a difference between not bringing in additional security and bringing anti-security. In my eyes, you are doing the latter.
Your default examples elevate privilege, not warning the user about this fact anywhere.
- iMil 11y agoDuly noted, I just added a word about it on the GitHub page, and you're right, I should run the examples services with a dedicated user as I already do for the nginx process. Thanks for your feedback!
- iMil 11y agoAnd so it is, I just commited changes so both PM2 and gunicorn are started with a specific user.