ricardoekm / Kyrix

Interactive pan/zoom data visualizations at scale
0 stars 0 forks source link

Run Kyrix with low privileges #2

Open ricardoekm opened 4 years ago

ricardoekm commented 4 years ago

readm.md tells the user to run Kyrix as sudo: sudo ./run-kyrix.sh --nba

Usually it's a security best practice to run ordinary applications with low privileges. This avoids exploit of the system through the application in case of a security breach and limits the damage of any implementation mistake.

asah commented 4 years ago

Docker requires root by default - anybody who cares can simply install docker to allow regular users to start VMs, then run-kyrix should run fine as a user.

ricardoekm commented 4 years ago

Right, as Kyrix requires Docker to be pre-installed: "Install Docker (e.g. on a Linux system run sudo apt update; sudo apt install -y docker.io docker-compose;)."

I think run-kyrix would run OK as user.