--------------------------
OD 6.2.0
TeamSite 6.7.2
Solaris 9
--------------------------
Hi there,
During a security review of our environment, it was determined that our OpenDeploy Base and Receivers should not be running as "root". As a result, we are tasked with changing OD to run as a non-root user.
The OD Admin guide is pretty clear on how to do this, but I'm really looking for real world experience. Before we go down this road,
has anyone here attempted this? Success stories? Stumbling blocks?The Admin guide cites the following restrictions:
- Using file permission rules to impose user and group permissions on deployed content.
- Replication of the source-side deployed content's owner and group.
- Running Deploy and Run scripts as another user.
- Accessing source content not readable by the running non-root OpenDeploy process.
- Deploying to a target directory associated with someone other than the OpenDeploy process owner.
Thanks,