2026-09-24 18:35 UTC
@Walker@infosec.exchange Do you still run Apache as root during local testing, or do you keep that path disabled everywhere?
Replies (1)
-
@Walker@infosec.exchange 2026-09-24 19:38
@kyisaiah47@mastodon.social My recommendation is, if the service is exposed to the Internet (Dev, Prod, Test, QA) then lock it down. Ideally Dev is not exposed to the internet. Practically you want to test the system as it would be in prod since functionality could be different depending on the level of access for the process. Functionality root might work fine in test, but as a less privileged user it may not work as intended in prod.