So I was wondering, what steps should we take to make sure PHP daemons are safe?
One of the things that I read about was assigning the daemon to run as a user with limited priveleges? But how can we do that in UNIX?
I am guessing using the useradd function but how do we make sure that user ADDED has limited privileges?
Also what other steps should we do for security when it comes to PHP daemons?
EDIT: I am using Centos 5.5 (Linux)