Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [www-data]

Default user under which apache web server is run on Debian-based systems.

www-data is the default user under which apache web server is run on Debian-based systems like Debian and Ubuntu.

77 questions
3
votes
2 answers

Is adding users to the group www-data safe on Debian?

Many PHP applications do self-configuration and self-updating. This requires apache to have write access to the PHP files. While chgrp'ing them all to www-data appears like a good practice to avoid making them world writable, I also wish to allow…
John
2
votes
1 answer

How to use NVM to switch Node versions for the Apache user ('www-data') - a user with severely limited functionality?

I call a Node script from PHP on my Ubuntu web server, as in // The following PHP executes in the context of the Apache user - 'www-data' // $execstring = "node " . $args; exec($execstring, $output, $return_value); As noted, the PHP code executes…
Dan Nissenbaum
  • 402
  • 2
  • 5
  • 14
2
votes
1 answer

Nginx + GUnicorn + Flask + www-data user - file lockdown

I have some pretty basic questions about I am deploying a Flask application in Gunicorn (19.0-1) on Ubuntu (14.10) in combination with Nginx. Since this app sits along side to Web2Py, I followed a guide to locking down the website produced by Web2Py…
Donal Lafferty
  • 186
  • 6
2
votes
1 answer

Web server users and groups

I've set up a web server of which will host sites for multiple clients, each client will have their own user and the files for their website(s) will exist within /var/www. We deploy code via a service called DeployHQ, of which connects via SSH using…
Ben Everard
  • 599
  • 3
  • 7
  • 22
2
votes
3 answers

How do I change www-data home directory from /var/www to /home/www-data?

I'm setting up a private Ubuntu web server. In my company I'm used to a deployment where the home folder of www-data is in /home/www-data, but on my plain Ubuntu installation it is in /var/www. Now how can I change this? With usermod -d? And is this…
sspross
  • 151
  • 1
  • 1
  • 5
2
votes
2 answers

Should I add the user www-data? Trying to get Rails off the ground

I'm trying to set up a Rails application on a redhat server, and in accordance with instructions I have found on multiple tutorials, I wish to set the owner of certain directories to 'www-data' so that Passenger shall have owner-access. However, I…
JellicleCat
  • 294
  • 2
  • 4
  • 17
2
votes
1 answer

pure-ftpd debian, can't get www-data user working

I'm trying to add FTP access to the Apache web files, in the past I have done this with an ftpuser and group arrangement. This time I would like to make it possible to login directly as www-data (the default Apache user on Debian) to make things a…
lynks
  • 151
  • 1
  • 6
2
votes
3 answers

Need scp with www-data without the need for password

I have a DMZ with a web server running Ubuntu 11.04 and an application server running Ubuntu 11.10. I have set things up so that I can scp from the web server to the application server by running ssh-keygen ssh-copy-id peter@192.168.1.6 where…
OtagoHarbour
  • 187
  • 3
  • 10
2
votes
1 answer

How to set default group permission in Ubuntu for www-data (apache's user)?

I have not been able to set a umask for www-data (apache's user). I tried to put umask 002, like in many other examples I found, in /etc/init.d/apache2 script, or in /etc/apache2/envvars.... Then I restart my apache server. As an example, after…
arod
  • 582
  • 6
  • 19
2
votes
3 answers

What's a sensible workflow for deploying webserver content using git push?

I'd like to use git push to update my (nginx) webserver content, while still keeping things secure. One way I could do this would be to ssh to my server, git pull from bitbucket into /srv/www, and chown -R www-data:www-data .. It'd be slicker,…
Grumdrig
  • 491
  • 5
  • 10
2
votes
3 answers

Change Exim4 www-data user (Ubuntu)

How can I change Exim4's default user for sending mail? I hate the www-data thing. When I try sending mail to certain people I get this error (found in /var/log/exim4/mainlog): 2011-04-24 01:10:54 1QDraw-0001mS-QS <= www-data@mydomain.com U=www-data…
walrithatneedshelp
  • 21
  • 1
  • 2
1
vote
1 answer

PHP Script and correct permissions for user to change everything

The network configuration doesn't allow access to FTP from outside the building. There's one user that need to upload and change files from a specific folder so I've installed TinyFileManager https://tinyfilemanager.github.io/ Created the…
Enrique Becerra
  • 145
  • 3
  • 8
1
vote
1 answer

Properly using www-data to add/edit/remove safely

After building a LAMP stack, it's my understanding that Apache creates a www-data user. But you can't directly log in as www-data (security reasons). Instead, if you want to do something as www-data then you have to run this: su -s /bin/bash…
Craig
  • 165
  • 1
  • 1
  • 7
1
vote
1 answer

How to set up secure permissions: Multiple Users & Websites / Apache / www-data

I had my own private VPS that my hosting service managed and now I am switching to a cloud server where I have to manage everything myself. I am trying to mimic their secure setup that they had. On my old & new server, I have my users/websites set…
peppy
  • 73
  • 2
  • 10
1
vote
0 answers

Permissions in folder owned by group www-data

I run apache2 webserver on Debian 9 and root of that web is located in /srv/www/, I am logged as user tomsk, problem is that I don't have a permissions in /srv/www/ because it is owned by www-data group. As far as I know, www-data has only read…
tomsk
  • 287
  • 1
  • 6
  • 18
1
2
3 4 5 6