duanqu9279 2013-06-20 17:28
浏览 30
已采纳

避免以root身份运行apache [关闭]

I am working on Apache server on localhost in Linux mint and need to create new file and folder using php script. But it is returning permission denied on 'mkdir' function.

I googled and found that Apache needs to run as root for such permissions. It is running as 'www-data' in my machine. But I also found that running Apache as root will open many vulnerabilities and there is no situation where Apache is needed to run as root.

How to overcome permission restrictions in apache?

  • 写回答

1条回答 默认 最新

  • duange2971 2013-06-20 17:46
    关注

    NEVER EVER let apache run as root - in case of any flaws in your PHP, consequences would be TERRIFYING

    Also adding www-data to sudoers is like one of the worst ideas I've seen so far

    You need root priviliges to MANAGE apache (start/stop etc)

    Make sure that the folder in which you have the PHP script belongs to www-data user & group, and it has sufficient permissions. Also, I don't know how your PHP is configured, but if you are using PHP as CGI, make sure that PHP is also running as www-data

    system('whoami');

    will help you to determine the user :)

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?