Subj : Re: Nightmares / Dreams
To   : Andre
From : 2twisty
Date : Sat Apr 02 2022 09:21:58

 An> That has the added benefit of not needing to start the BBS as a
 An> privileged user since it's a high port (above 1024). One less thing to
 An> deal with, since I'm sure a lot of sysops get confused by it and end up
 An> running the BBS as root.

....and therefore believe that SSH == root access.

I launch mu bbs with 

sudo -u unprivuser /mystic/mis daemon

Same thing with the MRC python script.  None of this BBS stuff runs as root. If I needed more privs, I'd make another user account with just enough privs to do the job.

Its the principle of least access.  Security 101.

--- Mystic BBS v1.12 A47 2021/12/24 (Linux/64)
 * Origin: The Ratrace Losers (21:3/166)

.