1 pointby entryleveljobsc7 hours ago1 comment
  • mritzmann7 hours ago
    Not if the security vulnerability does not also lead to root privileges.
    • d3Xt3r5 hours ago
      Not necessarily, you can run php without root, and if you grant it CAP_NET_BIND_SERVICE capability, you can even run it on port 80.

      There's many other ways to go about it too without granting that capability (like port redirection, reverse proxy tunnel etc).

      In fact I would say these days, no one should be running php or any web stack as root unless you've got very good reasons to do so.