least privilege
The rule that a program or a user gets only the rights it cannot do its job without. A service gets its own user, writes only to its own directory and has no capabilities it does not need.
The rule that a program or a user gets only the rights it cannot do its job without. A service gets its own user, writes only to its own directory and has no capabilities it does not need.