Install Web Sites in Root Directory, Bad Idea?

[albert]

On a VPS, I created an account where I put all my domain names. This is an account that only I will use. I plan to create other accounts through WHM that only specific people can access for development. Would it be a good idea to put my main account that only I use on the root level? Or is that considered a bad idea? Are there advantages to doing that?

[joshb]

I'll admit I'm not precisely clear on what you're asking. If you're asking if it's a good idea to give your main account root access, then no. For multiple reasons (security, the 'oops' factor, etc) it's a bad idea to have your main account be root.

Generally it's best to give yourself a normal account, and when you need to do something that requires root access, use 'su' or 'sudo'. This forces you to think about what you're doing a little more when you need root access, as well as bolsters your security.

[JPC-Veena]

Would it be a good idea to put my main account that only I use on the root level? Or is that considered a bad idea? Are there advantages to doing that?

Bad idea really, if you have a single vulnerable application installed on that site, it could gain root access easily, that would be a major security hole.

[jason]

Best bet is to never use root for anything that you don't need to be root to do. I always create a user account as my home base on any systems I run and use that to do as much as I can. When I need root then I'll "su" to a root shell or run a command with "sudo," but I try and do that as little as possible.

--Jason