duanqu9279 2013-06-20 17:28
浏览 30
已采纳

避免以root身份运行apache [关闭]

I am working on Apache server on localhost in Linux mint and need to create new file and folder using php script. But it is returning permission denied on 'mkdir' function.

I googled and found that Apache needs to run as root for such permissions. It is running as 'www-data' in my machine. But I also found that running Apache as root will open many vulnerabilities and there is no situation where Apache is needed to run as root.

How to overcome permission restrictions in apache?

  • 写回答

1条回答 默认 最新

  • duange2971 2013-06-20 17:46
    关注

    NEVER EVER let apache run as root - in case of any flaws in your PHP, consequences would be TERRIFYING

    Also adding www-data to sudoers is like one of the worst ideas I've seen so far

    You need root priviliges to MANAGE apache (start/stop etc)

    Make sure that the folder in which you have the PHP script belongs to www-data user & group, and it has sufficient permissions. Also, I don't know how your PHP is configured, but if you are using PHP as CGI, make sure that PHP is also running as www-data

    system('whoami');

    will help you to determine the user :)

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 如何在scanpy上做差异基因和通路富集?
  • ¥20 关于#硬件工程#的问题,请各位专家解答!
  • ¥15 关于#matlab#的问题:期望的系统闭环传递函数为G(s)=wn^2/s^2+2¢wn+wn^2阻尼系数¢=0.707,使系统具有较小的超调量
  • ¥15 FLUENT如何实现在堆积颗粒的上表面加载高斯热源
  • ¥30 截图中的mathematics程序转换成matlab
  • ¥15 动力学代码报错,维度不匹配
  • ¥15 Power query添加列问题
  • ¥50 Kubernetes&Fission&Eleasticsearch
  • ¥15 報錯:Person is not mapped,如何解決?
  • ¥15 c++头文件不能识别CDialog