I run a service on a debian/linux machine which runs at boot with a 'screen' session I can always attach to.
I would like to create a username which I can run this service as. At the moment I use a 'regular' login account. I would like the added security of a username dedicated to this sevrice (similar to the way 'nobody' or 'web' are used with apache).
- No ability to login, locally or remotely (so no password to manage)
- Ability for approved users to gain access to the screen session, and interact with the service.
I imagine the solution will have creative use of su/sudo and the details of how to create the account.