6 ms·
Next step is to remove users/groups/sudo from Linux/UNIX entirely. I'm one person using the computer, running software I trust. I don't need it.
by shpx 3y ago
Next step is to remove users/groups/sudo from Linux/UNIX entirely. I'm one person using the computer, running software I trust. I don't need it.
- sph 3y agoJust login as root. Not that I'd recommend it.
- mnd999 3y agoI suspect if you look in your passwd file you’ll find lots of users. Does nginx really need to read the files in your home directory?
- bmacho 3y agoWhy, yes. Imagine you are in flow, and you want to show a file to nginx, but you can't. Better give root (and user) rights to nginx when you set up your system.
- scraptor 3y agoVery few computers running nginx have human user accounts with more than dotfiles in the home directory. Meanwhile desktops run everything on the same account because defining usable security policies between users is basically impossible.
- mnd999 3y agoSure, in production. I don’t think that’s generally true though. It’s pretty common for developers to run an http server for test purposes. But anyway, that was just an example. I could have said cups.
- radiator 3y agoSo ...puppy Linux?