8Eki
putting database mongod.conf under $HOME/web-server/. instead of /etc/
Would there be any security concerns saving mongod.conf to $HOME/web-server/mongod.conf instead of /etc/mongod.conf ?
If the config was under $HOME/web-server/mongod.conf would that mean someone (or a buffer-overrun executable) could change the mongod.conf and turn off things like TLS and authorization and then restart the mongodb database?
This question generalizes to most databases since the all typically are dictated by a config file of some sort that is loaded by a Service which is typically run-as some kind of non-root user.
