News for hackers. Stuff that matters.

A comment on Sudo: Heap-based overflow with small passwords. Parent comment

Re:Sudo: Heap-based overflow with small passwords by ehutch79 on Friday November 04, 2022 @01:21PM (#33470360)
Are you suggesting running everything as root?

As in when you setup a new vm or whatnot, that you shouldn't create a user account to run thing as?

Does this include things like nginx not dropping privileges to run as a user?

[ Parent | on HN ]
Re:Sudo: Heap-based overflow with small passwords by candiddevmike on Friday November 04, 2022 @01:29PM (#33470512)
With just one user managing the server, for sysadmin tasks like SSH, use root, especially if you're going to sudo everything you do anyways. For services, they should still run as unprivileged users.
[ Parent | on HN ]