Error in console.
-
@rikodev you really shouldn't
-
@rikodev yeah, please don't install or run NodeBB with sudo.
-
Why shouldn't I use
sudo
to run NodeBB?You do not want to run NodeBB using
sudo
because this causes NodeBB to be run via theroot
user. This superuser has complete access to the entire system and should NodeBB ever become compromised, then a malicious user can utilise NodeBB as an attack vector to take over your system.Secondary effects from running NodeBB under
sudo
include the changing of ownership of some files toroot
, which would complicate administration of your NodeBB further as future starts of NodeBB will fail with anEACCES
error, simply because some files could not be written to, as they are now owned by root instead of the regular user!Best practice security recommends running NodeBB with as few privileges as possible (ideally,
nobody:nogroup
), but practically an unprivileged user is perfectly fine.By the way, this also means running NodeBB as a user that has sudo access is also insecure. Just some food for thought.