Is it a bad idea to grant shell access to the user account destined to be running Apache/Nginx?
I ask because, the Guvnr, in his VPS Bible series, sets up a new user with visudo'd
guvnr ALL=(ALL) ALL
privileges, and then sets up an Nginx server with that user.
Whereas the authors of Nginx HTTP Server recommend that you not grant shell access to the user running Nginx.
You could always remove guvnr's shell access, but then, how would you administer your websites?
edit: @Bart Silverstrim - Here's how the guvnr installs Nginx:
- (logged in as user guvnr)
- sudo install nginx dependencies
- user wget nginx source files
- user ./configure --sbin-path=/usr/local/sbin --with-http_ssl_module
- user make
- sudo make install
So perhaps Nginx is being installed to root here?
Is this an ok practice if root login is disabled in /etc/ssh/sshd_config?