I'm packaging Orbited [0] and set up init.d script. Orbited server can change its uid/gid but i wonder if it should be www-data:www-data, which, if compromised, could give access to web server files, which is not very secure. Or, as i first did it, as a Debian-orbited system user. In which case i wonder to which group /var/run and /var/log should belong. Any idea ?
[0] http://orbited.org -- To UNSUBSCRIBE, email to debian-python-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
