4 ms·
Should there ever be a web application that needs to run as root, it should be rewritten. All logic requiring root privileges should be moved into a separate sy
by eliaspro 5y ago
Should there ever be a web application that needs to run as root, it should be rewritten.
All logic requiring root privileges should be moved into a separate system service with a minimal attack surface to which the web application delegates those special tasks.
- vntok 5y agoYou misunderstood the grandparent's comment and replied to a confused parent. The application does not need to run as root, however even when it runs as a normal user, it generally has full read/write access to the application database. Which is a problem that is not easily solvable.