Separately to create a system user to use a service, even if the service is black with a hole, because didn't get root, also is unable to login, so the system is safe, see a lot of information, know can specify the user and the user such as before compilation./configure -- prefix=XXX - user=user1 - group=group1,
The first question is: if I were to use the RPM or yum how to specify the installation, don't want to specify a user installation must be native compilation to just go?
The second question is: baidu online, apache with root first installation, after installation is successful in its user and group options specified in the configuration file configuration, the problem is coming, if can do this, so if one service does not provide such a configuration file, how to do, is can't use system user starts its services, such as I write a program to monitor port 9000, I want to use the system account to start the service, whether it is feasible,
The third question is: I remember I use ordinary users start myeclipse, the process belongs to a regular user, if use root start this process belongs to the root, then the./configure -- prefix=XXX - user=user1 - group=group1, then install, compile the final with root start, why this service belongs to user1, attack the service access permissions and user1, rather than the root, this but with root to start the service, just during the compilation of configuration specifies the user user1, inherent principle is what? (user1 nologin), it is round,
See the passwd file sync, shutdown and other users of the system, when using the root account to perform the shutdown now should be to switch to the shutdown system users to perform it, what is the internal mechanism, system users and ordinary users really understanding is very confused, not to be able to understand, online tutorials or is just a matter of how to create users, not the interpretation of this aspect,
Also look at the great god, please help, thank you very much! (I was half a bucket of water level, strictly speaking that's less than half a bucket of water)

CodePudding user response:

Compile time, add the user/group is equivalent to the==installed software, and modify the configuration files
Launch applications users are can be modified through the configuration file
Generally do not recommend using the root user to start the application, some even forced not allow root start, such as the elasticsearch