A Question for discussion / debate:
Security teams often discourage tomcat / any other application / services to run with root users in linux so that no one can take advantage of Privilege escalations.
Having a unique user for a service and restricting user permissions to only certain related directories has to be a best practice.
What is Atlassian recommendation / your recommendations for running tomcat?
We were at times facing issues when JiraDC is ran with a dedicated user other than root. And hence unwillingly going to root user.