pharrington wrote:
> On May 23, 10:28am, Pra Bhandar <pbhandari2... / gmail.com> wrote:
> More importantly, why does your app need to run as root? Running as
> root and connecting to the internet is the most reliable way to ensure
> you get compromised. If there are certain resources that *absolutely*
> require root to obtain, then obtain them as early as possible
> (definitely before starting the WEBrick server), then setuid down to a
> saner user.

If you are just doing some development work on a non-server box you 
would have to be insane to believe this is a security risk.  I usually 
program as root, it is much more convenient.  I've never run WEBrick as 
anything *but* root.

It's not clear from the OP whether it works as some other user altho 
that seems to be implied.
-- 
Posted via http://www.ruby-forum.com/.