1 points | by entryleveljobsc 5 hours ago ago
2 comments
Not if the security vulnerability does not also lead to root privileges.
Not necessarily, you can run php without root, and if you grant it CAP_NET_BIND_SERVICE capability, you can even run it on port 80.
There's many other ways to go about it too without granting that capability (like port redirection, reverse proxy tunnel etc).
In fact I would say these days, no one should be running php or any web stack as root unless you've got very good reasons to do so.
Not if the security vulnerability does not also lead to root privileges.
Not necessarily, you can run php without root, and if you grant it CAP_NET_BIND_SERVICE capability, you can even run it on port 80.
There's many other ways to go about it too without granting that capability (like port redirection, reverse proxy tunnel etc).
In fact I would say these days, no one should be running php or any web stack as root unless you've got very good reasons to do so.