Recommend that users use a non-privelaged user (thanks Elrond for the text)

1 files changed, 22 insertions, 0 deletions

diff --git a/docs/source/deploying.rst b/docs/source/deploying.rst
index 22311a56..2e599b5e 100644
--- a/docs/source/deploying.rst
+++ b/docs/source/deploying.rst
@@ -58,6 +58,24 @@ running a smaller instance, consider following our `scaling down
 <http://wiki.mediagoblin.org/Scaling_Down>`_ guide (keeping in mind
 that the steps recommended here are tradeoffs!).
 
+
+Decide on a non-privileged user
+===============================
+
+As MediaGoblin does not require any special permissions, you
+should either decide on a user to run it as, or even better create a
+dedicated user for it. Consult your distribution's documentation on
+how to create dedicated service user. Make sure it does have a locked
+password, so nobody can login using this user.
+
+You should create a working dir for MediaGoblin. We assume you will
+check things out into /srv/mediagoblin.example.org/mediagoblin/ for
+this documentation, but you can choose whatever fits your local needs.
+
+Most of the remaining documentation assumes you're working as that
+user. As root, you might want to do "su - mediagoblinuser".
+
+
 Install MediaGoblin and Virtualenv
 ==================================
 
@@ -66,6 +84,10 @@ bleeding edge version of mediagoblin in mediagoblin master (possibly
 not the best choice in a production environment, so these docs should
 be fixed ;)).
 
+Change to (and possibly make) the appropriate parent directory:
+
+  cd /srv/mediagoblin.example.org/
+
 Clone the repository:
 
   git clone git://gitorious.org/mediagoblin/mediagoblin.git