On Oct 12, John Goerzen <jgoerzen@complete.org> wrote: >Along the same lines, we ought to have special accounts for >subsystems. We already have some of this. There's www-data, daemon, Agreed. We have many daemons which run as root even if they don't really need that. I think this should be policy ("daemons should run as root only if really needed"). -- ciao, Marco