Run system calls as separate user than your frontend
For security reasons you can run the esniper processes using a limited user.
To create and use a separate user (to simplify matters the user name here is esniper):
1. Install
sudo
2. Run (one line)
adduser --system --shell /bin/false --home /dev/null --disabled-password --disabled-login esniper
This creates a system user without home dir, shell and login.
3. Add to /etc/sudoers (one line)
<ApacheUser> ALL=(esniper) NOPASSWD: /usr/bin/sudo, /bin/sh, /bin/kill
4. Reconfigure via Setup
setup/index.php


![[ Download ]](files/download.gif)