Default user under which apache web server is run on Debian-based systems.

learn more… | top users | synonyms

185
votes
3answers
133k views

What's the best way of handling permissions for apache2's user www-data in /var/www?

Has anyone got a nice solution for handling files in /var/www? We're running Name Based Virtual Hosts and the apache2 user is www-data. We've got two regular users & root. So when messing with ...
6
votes
2answers
12k views

Allow User 'git' to run 'git pull' as 'www-data' via sudo

I would like to allow git to run 'git pull' as user 'www-data'. As far as i understand git ALL=(www-data) git pull in /etc/sudoers should make it. Sadly i get an Syntax error for this line and ...
4
votes
4answers
2k views

Linux Web Server Permissions - Best Practices

On a privately owned server with one website, is there any reason the files/directories within /var/www can't be group owned by www-data? My understanding is that security risks with www-data having ...
4
votes
3answers
334 views

The 301 'www' nightmare. How do I change back?

About six months ago, I decided it would be best to put my website on the naked domain, let's just say 'example.com'. I did what all the instructions websites have told me with adding a 301 redirect ...
4
votes
1answer
4k views

FTP user with home /var/www and group www-data has no write permission to /var/www

I have problems giving my FTP user who does not have sudo rights, write permission to /var/www. Question: How can I give the FTP user write permission to /var/www & subfolders only? ls -ld says:...
4
votes
1answer
3k views

Chown in sudoers file : Safe or not?

Is it safe to add this command in sudoers file? mike ALL= NOPASSWD:/bin/chown -R www-data\:www-data /var/www and this is the only command that I want to run $mike@ubuntu: sudo chown -R www-data:...
3
votes
2answers
3k views

Why Apache child process runs as root?

I am running Ubuntu server 10.10 with Apache2-mpm-prefork and apache2-mod-php5, I am using: User www-data Group www-data in the configuration file, when executing ps -efH I get these lines: ...
3
votes
3answers
150 views

Basic clarification about Limited FTP/sFTP users

I would like to get some clarification about the correct way to create limited users to access to my VPS user as WEBSERVER with Nginix. I'm used to NOT install FTP and access via SFTP only. It is ok ...
3
votes
2answers
6k views

Is adding users to the group www-data safe on Debian?

Many PHP applications do self-configuration and self-updating. This requires apache to have write access to the PHP files. While chgrp'ing them all to www-data appears like a good practice to avoid ...
2
votes
2answers
2k views

Should I add the user www-data? Trying to get Rails off the ground

I'm trying to set up a Rails application on a redhat server, and in accordance with instructions I have found on multiple tutorials, I wish to set the owner of certain directories to 'www-data' so ...
2
votes
1answer
89 views

Web server users and groups

I've set up a web server of which will host sites for multiple clients, each client will have their own user and the files for their website(s) will exist within /var/www. We deploy code via a ...
2
votes
1answer
3k views

How to set default group permission in Ubuntu for www-data (apache's user)?

I have not been able to set a umask for www-data (apache's user). I tried to put umask 002, like in many other examples I found, in /etc/init.d/apache2 script, or in /etc/apache2/envvars.... Then I ...
2
votes
3answers
375 views

What's a sensible workflow for deploying webserver content using git push?

I'd like to use git push to update my (nginx) webserver content, while still keeping things secure. One way I could do this would be to ssh to my server, git pull from bitbucket into /srv/www, and ...
2
votes
2answers
280 views

apache2: start processes with other than www-data user

apache2 seem to start new processes with www-data user. How could I make it start new processes with some other user? ubuntu 11.04 by the way.
2
votes
3answers
2k views

Change Exim4 www-data user (Ubuntu)

How can I change Exim4's default user for sending mail? I hate the www-data thing. When I try sending mail to certain people I get this error (found in /var/log/exim4/mainlog): 2011-04-24 01:10:54 ...
2
votes
2answers
564 views

Critical problem with www-data permission

i am using an apache webserver on debian, handling 12 different websites. Two days ago i suffered an attack and a hacker uploaded a php shell thru ftp in one of those 12 sites. What i'd though about ...
2
votes
1answer
259 views

Nginx + GUnicorn + Flask + www-data user - file lockdown

I have some pretty basic questions about I am deploying a Flask application in Gunicorn (19.0-1) on Ubuntu (14.10) in combination with Nginx. Since this app sits along side to Web2Py, I followed a ...
2
votes
1answer
2k views

pure-ftpd debian, can't get www-data user working

I'm trying to add FTP access to the Apache web files, in the past I have done this with an ftpuser and group arrangement. This time I would like to make it possible to login directly as www-data (the ...
2
votes
1answer
4k views

Add www-data to group

I have a directory with the following details: drwxrwxr-x 6 root devs 4.0K Sep 9 14:57 project_dev Now I want www-data (Apache daemon) to have an access to this directory, so in my mind I am ...
2
votes
3answers
1k views

Need scp with www-data without the need for password

I have a DMZ with a web server running Ubuntu 11.04 and an application server running Ubuntu 11.10. I have set things up so that I can scp from the web server to the application server by running ssh-...
1
vote
1answer
695 views

Is suPHP any more secure than alternatives?

I have a web application needs write access to certain folders on a LAMP server. Since suPHP / suEXEC escalate operations to an account you specify, it seems like your server is no more secure ...
1
vote
2answers
2k views

Added a new user to group www-data and to sudoers, still not sure why user creates new directories as root

I'm new to Linux systems administration (dealing with users and groups) but I do have a lot of command line experience as a developer. Right now, i'm trying to make sure that three users I've added ...
1
vote
1answer
65 views

Debian virtualenv location

I have a question that I would appreciate some help with. I want to run a number of sites from my debian server, each with their own virtualenv. Should I be creating my virtualenv in the www-data or /...
1
vote
1answer
1k views

Using www-data through SSH

For development purposes I'm using www-data (on an ubuntu 11.10 server) to ssh in and fire git commands and basic stuff against the webroot. I don't have things like command history, coloring, etc ...
1
vote
1answer
159 views

Find a script which writes in /var/tmp [duplicate]

I discover that one of my partition was full. rootfs 20G 1,8G 17G 10% / /dev/root 20G 1,8G 17G 10% / devtmpfs 7,8G 184K 7,8G 1% /dev none ...
1
vote
1answer
117 views

www-data and server user

I have a WordPress installation on my first VPS, and ownership problem with www-data user and user I created (let's call it user1) to use for login (I disabled root login). I use user1 for FTP, but I ...
1
vote
1answer
545 views

chgrp to group I am not a member of

I'm creating git repositories, ldap accounts and ldap groups using PHP application. Everything works fine, but I have a problem to set right permissions to git repositories. Every ldap user is a ...
1
vote
2answers
2k views

Webmin / Virtualmin running php as www-data, is locked out of viewing .htaccess and writing

I've asked this on the virtualmin forums, but haven't had any help from there. Recently, "something" happened and it seems that the apache service has gone a bit weird. What it does: it runs all ...
1
vote
1answer
460 views

www-data user doesn't seem to have the access to use php-curl

I'm trying to get the simpletest module for drupal to work, which relies on php-curl to fetch its requests. When I as the user root do the following it works fine: root@server:~# php -a Interactive ...
1
vote
0answers
1k views

How do I allow www-data to (negatively) change the niceness of a process in Linux?

So I'm running a website using django and sometimes I call scripts located on the server by spawning a subprocess in python. When looking at the processes with "top" I see these are called under the ...
0
votes
2answers
348 views

www-data user can read /etc/fstab

I'm pretty new at this. So I figured out that apache2 starts processes as www-data user. Suppose this user then starts untrusted code. What if I wanted to disallow this user to read any files (like /...
0
votes
2answers
281 views

Appropriate to use www-data over FTP to restore backups?

I have a a script to automatically backup my WordPress database and files, and another to restore them over FTP. I'm setting up the FTP server and trying to decide which user to allow FTP access. I ...
0
votes
2answers
783 views

Does changing the home directory of www-data break anything (esp. apache)?

We're running on Ubuntu and have an Apache2 webserver with some apps that require cron-jobs installed. The cron jobs occasionally send mails which of course goes to the www-data user. The home dir of ...
0
votes
1answer
658 views

Ubuntu, www-data user cannot write to owned file

Help, I have a mission critical VPS runing Ubuntu 10.04 , which I am using for django. the web-app has been running fine for a month and then suddenly I can't write to the sqlite database anymore, ...
0
votes
1answer
1k views

restart apache under www-data user in ubuntu

I have a SaaS webapp service, so each time a new client is registered in my registration app, it creates a new subdomain and a new apache virtualhost config file, to enable this configuration I need ...
0
votes
1answer
218 views

Checking the history of www-data user [closed]

While normal users have a .bash_history in their home directory, the www-data user does not have a home directory. As such, are there any means to track the history of the www-data user?
0
votes
1answer
169 views

Creating svn repo programmatically from a webpage and sudo

We want to automate the creation of the svn repos and trac environments for new projects. Basically, this would mean creating a web script that got some info (like env and repo name, etc) from the ...
0
votes
3answers
7k views

How do I change www-data home directory from /var/www to /home/www-data?

I'm setting up a private Ubuntu web server. In my company I'm used to a deployment where the home folder of www-data is in /home/www-data, but on my plain Ubuntu installation it is in /var/www. Now ...
0
votes
1answer
89 views

Can't create files with `ubuntu` user under `/var/www`

I've added ubuntu user to the www-data group and set the folder permissions as follows: sudo gpasswd -a "$USER" www-data find /var/www -type f -exec chmod 0640 {} \; sudo find /var/www -type d -exec ...
0
votes
1answer
39 views

give www-data the permission to write into /home and others root directories

I have a big problem since few days with permissions on my Symfony2 application. The background : I write a PHP app with symfony2 which gives an overview of many Moodle instances on each servers ...
0
votes
0answers
37 views

What package creates the www-data user

I'm curious what package creates (independently of the obvious, e.g. apache2) the www-data user. I've machines that are not web servers and they also have the user. I'm on Ubuntu 14.04, but I thought ...
0
votes
1answer
206 views

How to run php exec for nested scripting on remote machines?

I originally asked this question stackEx, and realized it was a much better fit here. I'm trying to automate the deployment of services on a cluster of hosts from a web-server. I've evoked the php ...
0
votes
1answer
100 views

How do I create files in directory owned by user in same group without sudo?

I have created a user to own website files (drupal) and added that user to www-data, so essentially all files are drupaluser:www-data. I want to go in and put the site in to git but I get permission ...
0
votes
0answers
57 views

Apache and users write permission issues

On my web server I have two distinct folders, /home/dev/ and /home/prod/, each containing several websites. As you can guess, each directory is owned by the corresponding user, devand prod. The ...
0
votes
1answer
73 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...
0
votes
1answer
324 views

/usr/sbin/apache2 -k start command in HTOP running consistently. Is it a bot?

I have got a VPS with six websites running on it. None of them get very much traffic at all, maybe 10-20 a day each. As far as I am aware, /usr/sbin/apache2 -k start should represent a user hitting a ...
0
votes
0answers
40 views

Scripts not running as www-data on Ubuntu Server

I have a dedicated server running Ubuntu 10.04 LTS. Every other apache setup I've used defaults to running scripts as www-data. This one, however, is running everything as my username on the server ...
0
votes
1answer
599 views

Getting Redmine integrated with svn while running passenger as user www-data

I'm having some problems getting passenger and svn to work in Redmine. System Ubuntu 12.04 Apache 2.2.22 PassengerRuby 1.9.1 Passenger 3.0.19 Problem When I let Passenger do it's normal user ...
0
votes
1answer
971 views

How do I enable a group of users to edit files in Ubuntu var/www?

I'm hoping someone will be able to direct or help me understand how I can enable multiple users to edit the same files/folders in Ubuntu EC2 server (11.10). I currently use Transmit, the Terminal ...
0
votes
2answers
285 views

nginx + MySQL + php5 + Wordpress: Too much php5-fpm processes

I have this web server running on nginx + MySQL + php5 + Wordpress. The thing is, the server is to slow and I think it's due to the number of php5-fpm running. Look at the numbers of php5-fpm ...