When running a Unicorn server on Linux I am debating whether to run the service under a system or normal user. Which one should I use and why?
migrated from stackoverflow.com Feb 1 '12 at 3:35
This question came from our site for professional and enthusiast programmers.
"System user" is a very ambiguous statement.
Regardless, a general rule of thumb is to give each service its own specific user, and that user should only have permissions to its own application space (i.e., your
The reasoning here is that, in the event that a service application were to be somehow compromised (or just try to do something undesirable/dumb by itself), you don't want it to have the ability to modify anything other than itself. You want to keep it as isolated as possible from the rest of the system.