Securing server processes by creating a non-privileged user to run commands

secure_servers

#add a system user
sudo adduser --system --home=/opt/openerp --group openerp

#copying config files to correct locations
#The below commands make the file owned and writeable only by the openerp user and group and only readable by openerp #and root.
sudo cp /opt/openerp/server/install/openerp-server.conf /etc/
sudo chown openerp: /etc/openerp-server.conf
sudo chmod 640 /etc/openerp-server.conf

#running the command
sudo su - openerp -s /bin/bash # to open a shell
#or
sudo -u openerp /opt/openerp/server/openerp-server --config=/opt/openerp/server/install/openerp-server.conf