How can I allow reading specific root owned files by a non-root-user executed process?
I'm running node.js under Linux/Ubuntu. I do not want to run my process with root authorization, but must have readonly access a couple root owned files.
I currently can't read these files (certificate key files) unless I start the process via
sudo node .... Apart from those files the process is well behaved, able to run successfully when started under its own application user id.
I am hoping that I can do something like setup a symbolic link for the files which set permissions to allow the application user id read authorization to them. Since the certificate files are automatically maintained and updated by a separate process, I would rather not touch or copy them.
... But any other types solutions in the category of "don't run as root" are welcome too.