[daisy] Use non-root user to start daisy

Paul Focke paul at outerthought.org
Wed May 14 14:31:51 CEST 2008


Hi

Using dedicated users for server applications is generally a good idea.
Of course if you want to have your server listen to a port which is
smaller than 1024 will not be allowed. That is why we usually place an
apache httpd server in front of daisy when we want to have daisy respond
on port 80. Explanation can be found here.
http://cocoondev.org/daisydocs-2_2/admin/99-cd.html

hth

Paul

On Wed, 2008-05-14 at 14:08 +0200, Mario Brackeva wrote:
> Hi,
>  
> Our security policies say that applications should run under their
> dedicated user where possible.
> Is there a way to run daisy (2.2) as another user than root?
>  
> I tried. The repository seems to start fine, but during the statup of
> daisywiki, the following errors return:
> INFO   | jvm 1    | 2008/05/14 13:49:13 | 2008-05-14
> 13:49:13.491::WARN:  failed SelectChannelConnector @ 0.0.0.0:80
> INFO   | jvm 1    | 2008/05/14 13:49:13 | java.net.SocketException:
> Permission denied
>  
> INFO   | jvm 1    | 2008/05/14 13:49:13 | 2008-05-14
> 13:49:13.497::WARN:  failed Server at 23d278
> INFO   | jvm 1    | 2008/05/14 13:49:13 | java.net.SocketException:
> Permission denied
> 
> INFO   | jvm 1    | 2008/05/14 13:49:13 | 2008-05-14
> 13:49:13.501::WARN:  EXCEPTION
> INFO   | jvm 1    | 2008/05/14 13:49:13 | java.net.SocketException:
> Permission denied
>  
>  
> Tx,
> Mario.
> _______________________________________________
> daisy community mailing list
> Professional Daisy support: http://outerthought.org/en/services/daisy/support.html
> mail to: daisy at lists.cocoondev.org
> list information: http://lists.cocoondev.org/mailman/listinfo/daisy


More information about the daisy mailing list