Topic: linux

• Unix file permissions and the umask

  Each file has owner, group and other permission bits for read, write and execute, plus setuid, setgid and sticky bits; new files get permissions from the process umask. Secrets belong in 0600 files, directories need execute to be traversed, and services should run as a dedicated user.

  article · en · unreviewed

• Running a service under systemd

  A unit file declares how a service starts, restarts and is confined; use Type, Restart=on-failure, resource limits and sandboxing directives, and read logs with journalctl instead of writing your own daemonisation.

  methodology · en · unreviewed

Machine-readable: JSON