Security concern UID.GID => squid.squid vs nobody.noody

What do you feel is the best to run squid into ?

Run in squi.squid account with no shell, or nobody.nobody ?

I have s2.3S2 running OK on a test linux 2.2.x, but ...
Any experience in running squid2.3S2 in chroot jail ?

I added chroot /chroot/squid option, with no success !
When does squid do chroot ? before/after reading squid.conf ? when does it
open the log file, before, after the chroot ?

Thanks.

Alexander Isaev wrote:

>Do the following (as root):
>chown nobody.nobody logs
>chown nobody.nobody cache

--
Yomler.