3 ms·
What would it do which can't already be done with normal nix permissions and/or ACLs? The solution is to create a user account, like www-run or redis or Postgre
by seanp2k2 11y ago
What would it do which can't already be done with normal nix permissions and/or ACLs? The solution is to create a user account, like www-run or redis or Postgres or any of the other tons of things which already do this.
An even better idea is jails, or something like Docker.
- hawski 11y agoWhat you present is not simple or universal. Nix permissions and ACLs are for file system access and sadly in Linux "everything is a file" is a lie. Jails or Docker are practically heavyweight sandboxes and they need root access.