Chris Josephes wrote: > Actually, I don't understand why you're setting up memcache to run as a user > through the "-u" flag to the daemon. > > If you use a <method_context> block, you accomplish the same thing, > only more securely. Also it's easier for an administrator to change which > user account they would prefer to run memcache is, and it's more consistent > with other Solaris services. >
Two reasons: 1) This allows the user to continue to configure the service the same way he did with the previous version 2) That would open up a problem if you would bind to a privileged port, then you had to tell the user that he needs to add a section for privileges as well. Memcached will change it's user id and drop all privileges after binding to the port, so the effect would be the same. Cheers, Trond
