3 ms·
I liked the "drop privileges in Python for Tornado apps" article more. But even then, you would want to chroot/jail the user for more control over permissions.
by thegoleffect 16y ago
I liked the "drop privileges in Python for Tornado apps" article more. But even then, you would want to chroot/jail the user for more control over permissions.
- hoop 16y agoI'm glad you enjoyed the article, or at least one of them, haha. You're right, though, there are other options and considerations to be taken when considering the security of a web (or any) app. This is by no means a complete article on web app security and I hope nobody mistakes it as such I think chroot/jailing is covered in quite a few other places, but it was difficult to find out how to go from running Tornado apps in development to running them in production. My aim is for my blog post(s) help make finding this information a little easier for others. Thanks for the feedback!