>>>>> "Marc" == Marc Sherman <[EMAIL PROTECTED]> writes:

 Marc> Patrick Dixon wrote:
 >> I've also missed that you'll need to chown -Rf slimserver:slimserver
 >> /usr/local/slimserver
 >> after you've unpacked the slimserver code and made the link.

 Marc> I'd recommend root:slimserver, not slimserver:slimserver, and only
 Marc> make the files that need to be (the .conf files) group writable.
 Marc> Never give your process more permissions than it needs.

For that excact reason you should _never_ run anything as root, that
does not require root permission. 

I am runing my slimserver under slim:slim under DJB's
daemontools. Works like a charm. This also means that I am pretty
confident, that if that user is compromised he wont be able to do too
much serious damage. 

_______________________________________________
unix mailing list
[email protected]
http://lists.slimdevices.com/lists/listinfo/unix

Reply via email to