LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-28-2007, 08:51 PM   #1
jenny1
LQ Newbie
 
Registered: Apr 2007
Posts: 3

Rep: Reputation: 0
Question When to create a user & group for an app?


Some programs in linux have their own user and group, like mysql and apache. I know it is to limit the breach that can occur if that app is exploited. When should we create a dedicated user and group for an application? Should all daemons have their own user and group? Only networked daemons?

Right now I am looking at using swatch on my system to monitor logs. I wonder if i should create a user and group for it to run under.
 
Old 04-28-2007, 10:21 PM   #2
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Rep: Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738
All files, including executables (applications), have an owner and a group assignment.
Privileges are controlled by the assignment of the owner and group and by the permission codes.

You have more options for control of access than you can imagine....
 
Old 04-29-2007, 03:55 PM   #3
jenny1
LQ Newbie
 
Registered: Apr 2007
Posts: 3

Original Poster
Rep: Reputation: 0
Ya think!?

I expect these types of responses on forums allowing referral links in sigs. Your response is pointless IMHO, unless you want to reach 5000 posts this week.

Quote:
Originally Posted by pixellany
All files, including executables (applications), have an owner and a group assignment.
Privileges are controlled by the assignment of the owner and group and by the permission codes.

You have more options for control of access than you can imagine....
 
Old 04-29-2007, 05:34 PM   #4
Dark_Helmet
Senior Member
 
Registered: Jan 2003
Posts: 2,786

Rep: Reputation: 370Reputation: 370Reputation: 370Reputation: 370
I don't think there is any hard-and-fast rule to say when you should create a user and group for a particular program. If I were forced, I'd say each daemon, especially one with the ability to acquire root-like privileges (switching users) or has a large amount of data to read/write, should be run under a unique user/group combination. The opposite end of the spectrum has a user/group for every piece of software installed (for a unique method of package/software management) - see Linux from scratch; I think "pkguser" is the name of the package management method that does this if you're at all interested.

As for pixellany's response... well, I think there are times when people don't really read a post to understand exactly what's being asked or jump to a likely conclusion. It happens... it's happened to a number of my posts as well. Don't sweat it - unless the response causes the thread to get hijacked.
 
Old 04-30-2007, 05:57 PM   #5
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Rep: Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738Reputation: 738
Quote:
Originally Posted by jenny1
Ya think!?

I expect these types of responses on forums allowing referral links in sigs. Your response is pointless IMHO, unless you want to reach 5000 posts this week.
WTF????
I would send you an e-mail, but you don't have that enabled...
I post when I think I can help---period. Please accept that the wording of your post suggested that mine might have been useful. It is hard to understand why it should have upset you. I suggest that you stay on topic and avoid little zingers like this.
Good luck in all your Linux endeavours....
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
create user with secondary group levis_inferno Linux - Networking 6 05-31-2006 01:33 AM
can i create a user group at this site? asahlot LQ Suggestions & Feedback 1 10-13-2005 04:08 PM
user & group quota !! hitesh_linux Linux - General 1 11-14-2004 07:16 AM
create user/group in cmd line rgiggs Mandriva 3 04-12-2004 10:46 PM
RH 9.0 user & group help...... hct224 Linux - Newbie 3 06-22-2003 12:52 PM


All times are GMT -5. The time now is 12:49 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration