<div dir="ltr">On Wed, Mar 25, 2015 at 3:54 PM, James Miller <span dir="ltr"><<a href="mailto:gajs-f0el@dea.spamcon.org" target="_blank">gajs-f0el@dea.spamcon.org</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Found the following in the (somewhat dated) MythTV article on the Arch wiki:<br>
<br>
Security<br>
<br>
You may want to have the backend run as the previously-created mythtv user:<br>
<br>
This is a good idea since all user jobs are run as the same user as the user running the backend. If the backend is run as root, all user jobs will be run with root privileges.<br>
<br>
Edit /etc/conf.d/mythbackend<br>
<br>
MBE_USER='mythtv'<br>
<br>
So, is it better to have the mythtv user run the BE, like they advise? Is editing that file in that way still the right way to ensure that this happens, if so?<br>
<br></blockquote><div><br></div><div>Yes, I have always started mythbackend as the mythtv user. Obviously, your storage group directories will need write permission for that user, and the user should be part of the groups to give it necessary hardware access.<br><br>That config file is from the previous init system. If your distro uses systemd, just make sure "User=mythtv" is in the service file.<br></div></div><br></div></div>