Gill Bates
Gill Bates

Reputation: 15177

Is it necessary to run miltiple uWSGI web-sites with different users?

In the docs they say:

The customers’ applications can now be run (using the process manager of your choice, such as rc.local, Running uWSGI via Upstart, Supervisord or whatever strikes your fancy) with a different uid and a limited (if you want) address space for each socket:

Is it really necessary to do this? If yes - why?

Upvotes: 0

Views: 34

Answers (1)

roberto
roberto

Reputation: 12953

It is a general security rule. Immagine one of your app being compromised, if it runs with the same permissions of the others it will be potentially able to damage them as well.

Upvotes: 1

Related Questions