2 ms·
That's why you run programs as different users. Background services like nginx or jellyfin get their own users. Have a separate `games` user if you play video g
by ndriscoll 1y ago
That's why you run programs as different users. Background services like nginx or jellyfin get their own users. Have a separate `games` user if you play video games. If you're going to mess with untrustworthy code, make another user first. Don't give world permissions to your home directory.
- josephg 1y agoThat might help if nginx has a security vulnerability. But what about all the programs I run as a user? Nobody runs their IDE or “npm install” under separate user accounts. Nor should we have to in order to prevent a package from interacting with my filesystem outside of the project directory.