Groups > linux.debian.user > #201823

Re: www-data

From	mick crane <mick.crane@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: www-data
Date	2018-10-28 23:50 +0100
Message-ID	<wO22B-332-9@gated-at.bofh.it> (permalink)
References	<wO0Dx-2lb-27@gated-at.bofh.it> <wO0Nc-2oh-3@gated-at.bofh.it> <wO16x-2us-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 2018-10-28 21:38, Ben Caradoc-Davies wrote:
> On 29/10/2018 10:26, Carl Fink wrote:
>> On 10/28/2018 05:16 PM, mick crane wrote:
>>> what's the deal with www-data ?
>>> I never made that user
>>> I dunno if it has a password or what ?
>>> these are things that some setup / install makes ?
>> It's created by the Apache installer. Check the Apache docs.
> 
> And it should have no password. This user is accessed by switching to
> it from root. As a security measure, after binding to privileged
> network ports as root, apache switches to user www-data so that, if it
> is compromised, the damage is limited. Processes that have dropped
> root privileges cannot automatically regain them. Postgres and Tomcat
> do the same thing with their own dedicated users.

I'm asking because somebody is saying that webmail server files should 
be owned by root but I don't know about that, if somebody as got so far 
to be www-data they might as well be root ?

mick


-- 
Key ID    4BFEBB31

Thread

www-data mick crane <mick.crane@gmail.com> - 2018-10-28 22:20 +0100
  Re: www-data Carl Fink <carlf@panix.com> - 2018-10-28 22:30 +0100
    Re: www-data Ben Caradoc-Davies <ben@transient.nz> - 2018-10-28 22:50 +0100
      Re: www-data mick crane <mick.crane@gmail.com> - 2018-10-28 23:50 +0100
        Re: www-data Ben Caradoc-Davies <ben@transient.nz> - 2018-10-29 00:10 +0100
        Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-29 01:00 +0100
          Re: www-data David Wright <deblis@lionunicorn.co.uk> - 2018-10-29 18:30 +0100
            Re: www-data Michael Stone <mstone@debian.org> - 2018-10-29 20:30 +0100
          Re: www-data Jonathan Dowland <jmtd@debian.org> - 2018-10-30 11:20 +0100
            Re: www-data Curt <curty@free.fr> - 2018-10-30 11:50 +0100
            Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-30 14:30 +0100
              Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-30 14:40 +0100
                Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-10-30 15:30 +0100
              Re: www-data Martin <keine-eile@online.de> - 2018-10-30 15:10 +0100
              Re: www-data Jonathan Dowland <jmtd@debian.org> - 2018-11-01 13:00 +0100
                Re: www-data Gene Heskett <gheskett@shentel.net> - 2018-11-01 16:40 +0100
          Re: www-data mick crane <mick.crane@gmail.com> - 2018-10-31 21:00 +0100
    Re: www-data Ben Caradoc-Davies <ben@transient.nz> - 2018-10-28 23:00 +0100

csiph-web