Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Next step is to remove users/groups/sudo from Linux/UNIX entirely. I'm one person using the computer, running software I trust. I don't need it.


I suspect if you look in your passwd file you’ll find lots of users. Does nginx really need to read the files in your home directory?


Why, yes. Imagine you are in flow, and you want to show a file to nginx, but you can't. Better give root (and user) rights to nginx when you set up your system.


Very few computers running nginx have human user accounts with more than dotfiles in the home directory. Meanwhile desktops run everything on the same account because defining usable security policies between users is basically impossible.


Sure, in production. I don’t think that’s generally true though. It’s pretty common for developers to run an http server for test purposes. But anyway, that was just an example. I could have said cups.


Just login as root. Not that I'd recommend it.


So ...puppy Linux?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: