The ideal service runs with the minimum set of privileges necessary to perform the task it is configured to do.
When writing new services, consider the following:
- Can the service run as an unprivileged user?
- In most cases, the daemon can run as an unprivileged user or with a limited set of super-user capabilities
- Can the service run without network access?