DEV Community

Faruk
Faruk

Posted on • Originally published at Medium

What I Do Before Letting Any App Run as Root on My Linux Server | by Faruk Ahmed | Jun, 2025

Member-only story

What I Do Before Letting Any App Run as Root on My Linux Server

--

Share

Giving an app root access is like handing over your house keys — it better be worth it.

Yet I see devs, ops teams, and even security folks blindly installing tools that demand sudo, run as root, or worse… start at boot without limits.

Here’s my personal checklist — the exact steps I follow before I let anything run with elevated privileges on Linux or Ubuntu.

🔍 1. Read the Startup Script (Yes, Actually Read It)

If the app comes with an install script or .service file, I open it and look for:

  • sudo or su commands
  • chmod 777 (red flag)
  • Custom binaries with no integrity checks
  • Any curl-pipe-bash installation 🤦

✅ Example:

cat ./install.sh
Enter fullscreen mode Exit fullscreen mode

If it’s messy, obfuscated, or reaches out to external URLs — I don’t trust it yet.

🔐 2. Ask: “Does This Really Need Root?”

You’d be shocked how many apps say they need root, but don’t.

✅ I try installing or running it as a non-root user first.


👉 Read Full Blog on Medium Here

Tiger Data image

🐯 🚀 Timescale is now TigerData: Building the Modern PostgreSQL for the Analytical and Agentic Era

We’ve quietly evolved from a time-series database into the modern PostgreSQL for today’s and tomorrow’s computing, built for performance, scale, and the agentic future.

So we’re changing our name: from Timescale to TigerData. Not to change who we are, but to reflect who we’ve become. TigerData is bold, fast, and built to power the next era of software.

Read more

Top comments (0)