Groups > linux.debian.user > #201820

Re: www-data

From	Ben Caradoc-Davies <ben@transient.nz>
Newsgroups	linux.debian.user
Subject	Re: www-data
Date	2018-10-28 22:50 +0100
Message-ID	<wO16x-2us-3@gated-at.bofh.it> (permalink)
References	<wO0Dx-2lb-27@gated-at.bofh.it> <wO0Nc-2oh-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 29/10/2018 10:26, Carl Fink wrote:
> On 10/28/2018 05:16 PM, mick crane wrote:
>> what's the deal with www-data ?
>> I never made that user
>> I dunno if it has a password or what ?
>> these are things that some setup / install makes ?
> It's created by the Apache installer. Check the Apache docs.

And it should have no password. This user is accessed by switching to it 
from root. As a security measure, after binding to privileged network 
ports as root, apache switches to user www-data so that, if it is 
compromised, the damage is limited. Processes that have dropped root 
privileges cannot automatically regain them. Postgres and Tomcat do the 
same thing with their own dedicated users.

Kind regards,

-- 
Ben Caradoc-Davies <ben@transient.nz>
Director
Transient Software Limited <https://transient.nz/>
New Zealand

Thread

www-data mick crane <mick.crane@gmail.com> - 2018-10-28 22:20 +0100
  Re: www-data Carl Fink <carlf@panix.com> - 2018-10-28 22:30 +0100
    Re: www-data Ben Caradoc-Davies <ben@transient.nz> - 2018-10-28 22:50 +0100
      Re: www-data mick crane <mick.crane@gmail.com> - 2018-10-28 23:50 +0100
        Re: www-data Ben Caradoc-Davies <ben@transient.nz> - 2018-10-29 00:10 +0100
        Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-29 01:00 +0100
          Re: www-data David Wright <deblis@lionunicorn.co.uk> - 2018-10-29 18:30 +0100
            Re: www-data Michael Stone <mstone@debian.org> - 2018-10-29 20:30 +0100
          Re: www-data Jonathan Dowland <jmtd@debian.org> - 2018-10-30 11:20 +0100
            Re: www-data Curt <curty@free.fr> - 2018-10-30 11:50 +0100
            Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-30 14:30 +0100
              Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-30 14:40 +0100
                Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-30 15:30 +0100
              Re: www-data Martin <keine-eile@online.de> - 2018-10-30 15:10 +0100
              Re: www-data Jonathan Dowland <jmtd@debian.org> - 2018-11-01 13:00 +0100
                Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-11-01 16:40 +0100
          Re: www-data mick crane <mick.crane@gmail.com> - 2018-10-31 21:00 +0100
    Re: www-data Ben Caradoc-Davies <ben@transient.nz> - 2018-10-28 23:00 +0100

csiph-web