A Question for discussion / debate:
Security teams often discourage tomcat / any other application / services to run with root users in linux so that no one can take advantage of Privilege escalations.
Having a unique user for a service and restricting user permissions to only certain related directories has to be a best practice.
What is Atlassian recommendation / your recommendations for running tomcat?
We were at times facing issues when JiraDC is ran with a dedicated user other than root. And hence unwillingly going to root user.
(https://community.atlassian.com/t5/Jira-questions/Issue-with-NFS-4-1-mount-JIRA-DC-8-20-11/qaq-p/2455982#M589217)
It looks like you're new here. Sign in or register to get started.
