Access permissions for web server
Clash Royale CLAN TAG#URR8PPP
up vote
-1
down vote
favorite
I have Ubuntu server that is running a nginx server that has configured a bunch of sites that run php.
PHP is running under php-fpm.
In my php-fpm config, the 'user' and 'group' match the linux user to which the index.php file belongs.
So it works fine as long as all site directories have 755 permissions.
But once I chmod the directories so only the owners can have access to them (700), the sites stop working and I get a forbidden server message.
I don't understand why, because php-fpm is supposed to run under the same user that is the owner of the site directory.
Is it because the listen.owner and listen.group is www-data ?
ubuntu permissions php nginx
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
asked Nov 28 at 16:54
why
11
add a comment |
up vote
-1
down vote
favorite
I have Ubuntu server that is running a nginx server that has configured a bunch of sites that run php.
PHP is running under php-fpm.
In my php-fpm config, the 'user' and 'group' match the linux user to which the index.php file belongs.
So it works fine as long as all site directories have 755 permissions.
But once I chmod the directories so only the owners can have access to them (700), the sites stop working and I get a forbidden server message.
I don't understand why, because php-fpm is supposed to run under the same user that is the owner of the site directory.
Is it because the listen.owner and listen.group is www-data ?
ubuntu permissions php nginx
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
asked Nov 28 at 16:54
why
11
but the web server is not supposed to read the files. shouldn't php-fpm do that?
– why
Nov 28 at 16:58
If there was an earlier comment, it seems to have been deleted. The web server should be able to read the file to serve it over HTTP. Otherwise, how would 'index.php' be accessible over an HTTP URL?
– Haxiel
Nov 28 at 17:26
add a comment |
up vote
-1
down vote
favorite
up vote
-1
down vote
favorite
I have Ubuntu server that is running a nginx server that has configured a bunch of sites that run php.
PHP is running under php-fpm.
In my php-fpm config, the 'user' and 'group' match the linux user to which the index.php file belongs.
So it works fine as long as all site directories have 755 permissions.
But once I chmod the directories so only the owners can have access to them (700), the sites stop working and I get a forbidden server message.
I don't understand why, because php-fpm is supposed to run under the same user that is the owner of the site directory.
Is it because the listen.owner and listen.group is www-data ?
ubuntu permissions php nginx
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
asked Nov 28 at 16:54
why
11
I have Ubuntu server that is running a nginx server that has configured a bunch of sites that run php.
PHP is running under php-fpm.
In my php-fpm config, the 'user' and 'group' match the linux user to which the index.php file belongs.
So it works fine as long as all site directories have 755 permissions.
But once I chmod the directories so only the owners can have access to them (700), the sites stop working and I get a forbidden server message.
I don't understand why, because php-fpm is supposed to run under the same user that is the owner of the site directory.
Is it because the listen.owner and listen.group is www-data ?
ubuntu permissions php nginx
ubuntu permissions php nginx
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
asked Nov 28 at 16:54
why
11
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
asked Nov 28 at 16:54
why
11
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
edited Nov 28 at 17:03
Jeff Schaller
37.2k1052121
37.2k1052121
asked Nov 28 at 16:54
why
11
asked Nov 28 at 16:54
why
11
asked Nov 28 at 16:54
why
11
11
but the web server is not supposed to read the files. shouldn't php-fpm do that?
– why
Nov 28 at 16:58
If there was an earlier comment, it seems to have been deleted. The web server should be able to read the file to serve it over HTTP. Otherwise, how would 'index.php' be accessible over an HTTP URL?
– Haxiel
Nov 28 at 17:26
add a comment |
but the web server is not supposed to read the files. shouldn't php-fpm do that?
– why
Nov 28 at 16:58
If there was an earlier comment, it seems to have been deleted. The web server should be able to read the file to serve it over HTTP. Otherwise, how would 'index.php' be accessible over an HTTP URL?
– Haxiel
Nov 28 at 17:26
but the web server is not supposed to read the files. shouldn't php-fpm do that?
– why
Nov 28 at 16:58
but the web server is not supposed to read the files. shouldn't php-fpm do that?
– why
Nov 28 at 16:58
If there was an earlier comment, it seems to have been deleted. The web server should be able to read the file to serve it over HTTP. Otherwise, how would 'index.php' be accessible over an HTTP URL?
– Haxiel
Nov 28 at 17:26
If there was an earlier comment, it seems to have been deleted. The web server should be able to read the file to serve it over HTTP. Otherwise, how would 'index.php' be accessible over an HTTP URL?
– Haxiel
Nov 28 at 17:26
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f484721%2faccess-permissions-for-web-server%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
but the web server is not supposed to read the files. shouldn't php-fpm do that?
– why
Nov 28 at 16:58
If there was an earlier comment, it seems to have been deleted. The web server should be able to read the file to serve it over HTTP. Otherwise, how would 'index.php' be accessible over an HTTP URL?
– Haxiel
Nov 28 at 17:26