Avoiding apache to run as root

Question

I am working on Apache server on localhost in Linux mint and need to create new file and folder using php script. But it is returning permission denied on 'mkdir' function.

I googled and found that Apache needs to run as root for such permissions. It is running as 'www-data' in my machine. But I also found that running Apache as root will open many vulnerabilities and there is no situation where Apache is needed to run as root.

How to overcome permission restrictions in apache?

Whoever told you / posted you should run apache as root is an idiot. Simply make sure that the permissions of the `www-data` user are set correctly — PeeHaa, Jun 20 '13 at 17:30
@PeeHaa埽 be nice.. - Apache does not need "root" for such permissions. you just need to have the perms for the folders correct. — ddavison, Jun 20 '13 at 17:31
@sircapsalot Are you sure you just read my comment correctly? — PeeHaa, Jun 20 '13 at 17:32
Where are you trying to create the directory, may be that path requires root privileges — Rudra, Jun 20 '13 at 17:33
http://stackoverflow.com/questions/5165183/apache-permissions-php-file-create-mkdir-fail — aland, Jun 20 '13 at 17:36
Worked. Changed the user and group of folders to www-data. Thanks to all for help. — Shashwat Kumar, Jun 20 '13 at 17:41
There occurs a new problem. I changed the user and group of folders but not I am not able to edit the files since my user account is not www-data. How to get rid of this? — Shashwat Kumar, Jun 21 '13 at 15:32

score 5 · Accepted Answer · answered Jun 20 '13 at 17:46

NEVER EVER let apache run as root - in case of any flaws in your PHP, consequences would be TERRIFYING

Also adding www-data to sudoers is like one of the worst ideas I've seen so far

You need root priviliges to MANAGE apache (start/stop etc)

Make sure that the folder in which you have the PHP script belongs to www-data user & group, and it has sufficient permissions. Also, I don't know how your PHP is configured, but if you are using PHP as CGI, make sure that PHP is also running as www-data

system('whoami');

will help you to determine the user :)

Avoiding apache to run as root

1 Answers1