Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [www-data]

Default user under which apache web server is run on Debian-based systems.

-1
votes
2answers
1k views

BASH-create a 'www-data' crontab that runs a PHP file

I need to get this to run in a cron file in /etc/cron.d/: */15 * * * * php -f /var/www/nextcloud/cron.php ...but, my scripts don't run. It's permissions are set to 644 and I need to create it with a ...
0
votes
1answer
66 views

PHP 7 FPM checkconf is throwing invalid user: ‘www-data:www-data’, but I'm not using a www-data user

I'm using a different user for my web services. Screw convention. I don't have www-data set in any php config files: $ grep -rnw /etc -e 'www-data' $ But I'm still getting this error: $ ...
0
votes
0answers
6 views

execute permissions in www/html, acls, and files versus directories

for web development, apache2 on debian buster sets acls on /var/www/html > getfacl /var/www/html getfacl: Removing leading '/' from absolute path names # file: var/www/html # owner: www-data # ...
1
vote
1answer
54 views

Properly using www-data to add/edit/remove safely

After building a LAMP stack, it's my understanding that Apache creates a www-data user. But you can't directly log in as www-data (security reasons). Instead, if you want to do something as www-data ...
0
votes
1answer
57 views

520 `recv() failed` only when running application as www-data

I'm running a nginx proxy server that fronts a SignalR application with thousands of connected WebSocket clients. To accommodate all of these connections, I have set the following in nginx.conf: ...
0
votes
1answer
134 views

How can a hacker compromising the www-data user account install a rootkit?

Recently a site of mine was hacked. For sure the attacker can execute PHP and start an interactive shell, etc. I understand a hacker can delete files, or delete DB, the site folder, write in the cron ...
3
votes
0answers
213 views

Postfix pipe always runs as nobody

The problem I would like postfix to pipe emails to a script that operates on files owned by the www-data group located under /var/www/. However, I receive error messages that indicate insufficient ...
0
votes
1answer
153 views

How to set up secure permissions: Multiple Users & Websites / Apache / www-data

I had my own private VPS that my hosting service managed and now I am switching to a cloud server where I have to manage everything myself. I am trying to mimic their secure setup that they had. On my ...
3
votes
2answers
109 views

How can I keep one hacked website on my server from compromising the other websites?

I'm a teaching assistant in software security and running a server that is vulnerable by design. It's an nginx server, and it has 40 ports open. Each port serves a web application, and all the web ...
0
votes
1answer
38 views

How to upload via SFTP so that files and folders belonged to 'www-data' group?

A user112 belongs to www-data group and all website's files/folders belong to that group. However, when I upload new files/folders via SFTP with user112 credentials, the uploaded files/folders belong ...
1
vote
0answers
166 views

Permissions in folder owned by group www-data

I run apache2 webserver on Debian 9 and root of that web is located in /srv/www/, I am logged as user tomsk, problem is that I don't have a permissions in /srv/www/ because it is owned by www-data ...
2
votes
3answers
3k views

Insecure Connection: issue on www redirect to non-www with https

I am not much familiar with server configurations, please help me on this issue: I have a Debian8 server and a SSL certificate, the SSL certificate only for My non-www domain so I would like to ...
0
votes
1answer
496 views

apache2 server no permission on new directory

I am setting up an apache2 server on my server. I wanted to use another directory then /var/www. I created the directory /web added my user to the www-data group changed the owner/group and the ...
-1
votes
1answer
461 views

Executing external file as www-data (Ubuntu 16.04)

I want to start a virtual machine through PHP, but i've had no luck. Here's what i've got. <?php if(isset($_POST['btn_start'])){ echo shell_exec('whoami'); echo exec('virsh start winagain'); }...
2
votes
1answer
441 views

How to use NVM to switch Node versions for the Apache user ('www-data') - a user with severely limited functionality?

I call a Node script from PHP on my Ubuntu web server, as in // The following PHP executes in the context of the Apache user - 'www-data' // $execstring = "node " . $args; exec($execstring, $output, ...
1
vote
1answer
953 views

Set umask 0002 for apache user: www-data

I'm running ubuntu 14.04 and would like to have apaches www-data user to create files that are writable by all users within that same group www-data. So far I've tried to add umask 0002 or umask 002 ...
3
votes
2answers
548 views

www-data security issue across multiple sites in a vps

I recently bought a VPS and learned a lot from it. I manged to create an ftp user, set it as the owner of my site's document root, add it to the www-user group, set the group as the group of the ...
-1
votes
1answer
51 views

PHP: how to write a file when no permissions are granted to www-data user [closed]

I have a WEB-page on Apache/2.2.9 (Debian) server located in .../public_html I am a user with no root preveligies. I rewrote my site in PHP and noticed that it cannot write files in ../public_html I ...
0
votes
1answer
517 views

Can't create files with `ubuntu` user under `/var/www`

I've added ubuntu user to the www-data group and set the folder permissions as follows: sudo gpasswd -a "$USER" www-data find /var/www -type f -exec chmod 0640 {} \; sudo find /var/www -type d -exec ...
0
votes
1answer
341 views

give www-data the permission to write into /home and others root directories

I have a big problem since few days with permissions on my Symfony2 application. The background : I write a PHP app with symfony2 which gives an overview of many Moodle instances on each servers ...
2
votes
1answer
582 views

Nginx + GUnicorn + Flask + www-data user - file lockdown

I have some pretty basic questions about I am deploying a Flask application in Gunicorn (19.0-1) on Ubuntu (14.10) in combination with Nginx. Since this app sits along side to Web2Py, I followed a ...
0
votes
1answer
443 views

How to run php exec for nested scripting on remote machines?

I originally asked this question stackEx, and realized it was a much better fit here. I'm trying to automate the deployment of services on a cluster of hosts from a web-server. I've evoked the php ...
0
votes
1answer
142 views

How do I create files in directory owned by user in same group without sudo?

I have created a user to own website files (drupal) and added that user to www-data, so essentially all files are drupaluser:www-data. I want to go in and put the site in to git but I get permission ...
1
vote
0answers
76 views

Apache and users write permission issues

On my web server I have two distinct folders, /home/dev/ and /home/prod/, each containing several websites. As you can guess, each directory is owned by the corresponding user, devand prod. The ...
0
votes
1answer
131 views

Allow dev user to edit files that sometimes belong to www-data

This question has been asked time and time again but none of the answers seem to answer my specific question - either that or I'm not getting it. Anyway, as per the title, I'm trying to limit our web ...
0
votes
1answer
1k views

Checking the history of www-data user [closed]

While normal users have a .bash_history in their home directory, the www-data user does not have a home directory. As such, are there any means to track the history of the www-data user?
1
vote
1answer
390 views

Find a script which writes in /var/tmp [duplicate]

I discover that one of my partition was full. rootfs 20G 1,8G 17G 10% / /dev/root 20G 1,8G 17G 10% / devtmpfs 7,8G 184K 7,8G 1% /dev none ...
0
votes
1answer
516 views

/usr/sbin/apache2 -k start command in HTOP running consistently. Is it a bot?

I have got a VPS with six websites running on it. None of them get very much traffic at all, maybe 10-20 a day each. As far as I am aware, /usr/sbin/apache2 -k start should represent a user hitting a ...
4
votes
1answer
5k views

FTP user with home /var/www and group www-data has no write permission to /var/www

I have problems giving my FTP user who does not have sudo rights, write permission to /var/www. Question: How can I give the FTP user write permission to /var/www & subfolders only? ls -ld says:...
1
vote
1answer
359 views

www-data and server user

I have a WordPress installation on my first VPS, and ownership problem with www-data user and user I created (let's call it user1) to use for login (I disabled root login). I use user1 for FTP, but I ...
0
votes
0answers
45 views

Scripts not running as www-data on Ubuntu Server

I have a dedicated server running Ubuntu 10.04 LTS. Every other apache setup I've used defaults to running scripts as www-data. This one, however, is running everything as my username on the server ...
2
votes
1answer
117 views

Web server users and groups

I've set up a web server of which will host sites for multiple clients, each client will have their own user and the files for their website(s) will exist within /var/www. We deploy code via a ...
1
vote
0answers
1k views

How do I allow www-data to (negatively) change the niceness of a process in Linux?

So I'm running a website using django and sometimes I call scripts located on the server by spawning a subprocess in python. When looking at the processes with "top" I see these are called under the ...
1
vote
1answer
103 views

Debian virtualenv location

I have a question that I would appreciate some help with. I want to run a number of sites from my debian server, each with their own virtualenv. Should I be creating my virtualenv in the www-data or /...
-1
votes
1answer
572 views

www-data runs in terminal but in php it does not execute, apache2, debian squeeze [closed]

I have external program.exe inside my website that gets data from text file, process it and then output to another textfile. Since apache uses www-data as user account, i manage to log in to terminal ...
0
votes
2answers
1k views

Does changing the home directory of www-data break anything (esp. apache)?

We're running on Ubuntu and have an Apache2 webserver with some apps that require cron-jobs installed. The cron jobs occasionally send mails which of course goes to the www-data user. The home dir of ...
7
votes
1answer
8k views

Chown in sudoers file : Safe or not?

Is it safe to add this command in sudoers file? mike ALL= NOPASSWD:/bin/chown -R www-data\:www-data /var/www and this is the only command that I want to run $mike@ubuntu: sudo chown -R www-data:www-...
1
vote
3answers
12k views

How do I change www-data home directory from /var/www to /home/www-data?

I'm setting up a private Ubuntu web server. In my company I'm used to a deployment where the home folder of www-data is in /home/www-data, but on my plain Ubuntu installation it is in /var/www. Now ...
0
votes
1answer
763 views

Getting Redmine integrated with svn while running passenger as user www-data

I'm having some problems getting passenger and svn to work in Redmine. System Ubuntu 12.04 Apache 2.2.22 PassengerRuby 1.9.1 Passenger 3.0.19 Problem When I let Passenger do it's normal user ...
2
votes
2answers
5k views

Should I add the user www-data? Trying to get Rails off the ground

I'm trying to set up a Rails application on a redhat server, and in accordance with instructions I have found on multiple tutorials, I wish to set the owner of certain directories to 'www-data' so ...
4
votes
3answers
584 views

The 301 'www' nightmare. How do I change back?

About six months ago, I decided it would be best to put my website on the naked domain, let's just say 'example.com'. I did what all the instructions websites have told me with adding a 301 redirect ...
3
votes
3answers
160 views

Basic clarification about Limited FTP/sFTP users

I would like to get some clarification about the correct way to create limited users to access to my VPS user as WEBSERVER with Nginix. I'm used to NOT install FTP and access via SFTP only. It is ok ...
1
vote
1answer
839 views

chgrp to group I am not a member of

I'm creating git repositories, ldap accounts and ldap groups using PHP application. Everything works fine, but I have a problem to set right permissions to git repositories. Every ldap user is a ...
1
vote
1answer
2k views

Using www-data through SSH

For development purposes I'm using www-data (on an ubuntu 11.10 server) to ssh in and fire git commands and basic stuff against the webroot. I don't have things like command history, coloring, etc ...
2
votes
1answer
2k views

pure-ftpd debian, can't get www-data user working

I'm trying to add FTP access to the Apache web files, in the past I have done this with an ftpuser and group arrangement. This time I would like to make it possible to login directly as www-data (the ...
3
votes
1answer
10k views

Add www-data to group

I have a directory with the following details: drwxrwxr-x 6 root devs 4.0K Sep 9 14:57 project_dev Now I want www-data (Apache daemon) to have an access to this directory, so in my mind I am ...
2
votes
3answers
1k views

Need scp with www-data without the need for password

I have a DMZ with a web server running Ubuntu 11.04 and an application server running Ubuntu 11.10. I have set things up so that I can scp from the web server to the application server by running ssh-...
1
vote
1answer
848 views

Is suPHP any more secure than alternatives?

I have a web application needs write access to certain folders on a LAMP server. Since suPHP / suEXEC escalate operations to an account you specify, it seems like your server is no more secure ...
4
votes
4answers
3k views

Linux Web Server Permissions - Best Practices

On a privately owned server with one website, is there any reason the files/directories within /var/www can't be group owned by www-data? My understanding is that security risks with www-data having ...
0
votes
1answer
1k views

How do I enable a group of users to edit files in Ubuntu var/www?

I'm hoping someone will be able to direct or help me understand how I can enable multiple users to edit the same files/folders in Ubuntu EC2 server (11.10). I currently use Transmit, the Terminal ...