sec: 实施最小权限 — 创建 rust-backend 系统用户运行后端，限制 deploy sudo 仅允许部署/运维命令

2026-07-15 11:17:24 +08:00
parent 36d384f8fa
commit 2908d8c86c
4 changed files with 8 additions and 8 deletions
--- a/deploy/rust-backend-development.service
+++ b/deploy/rust-backend-development.service
@@ -5,8 +5,8 @@ Wants=network.target

 [Service]
 Type=simple
-User=root
-Group=root
+User=rust-backend
+Group=rust-backend
 WorkingDirectory=/root/rust/rust_backend_dev
 ExecStart=/root/rust/rust_backend_dev/rust-backend
 Restart=always