Univention Bugzilla – Bug 51239
Portal server runs as root
Last modified: 2020-05-07 08:54:55 CEST
Running network facing services needlessly as user "root" is a CWE-272 violation of the "Principle of least privilege". # ps u $(pgrep -f /usr/bin/univention-portal-server) USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 1905 0.0 1.5 611784 15804 ? Ss Mai04 0:02 /usr/bin/python2.7 /usr/bin/univention-portal-server Nevertheless the service should not run as user "root" but use a dedicated local user account.