Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
To: users@httpd.apache.org
From: Matthias Leopold <matthias@leopold.priv.at>
Message-ID: <296fb75a-b855-c9ae-d58b-f27750e1a5ea@leopold.priv.at>
Date: Thu, 29 Dec 2016 19:35:20 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.5.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] php-fpm user other than webserver user?
archived-at: Thu, 29 Dec 2016 18:35:28 -0000

Hi,

I hope this is an appropriate place for my question (also sent it to 
CentOS list):

I'd like to know how others handle the setup of Apache httpd and PHP-FPM 
when the PHP-FPM user is different from the webserver user. This is the 
case in the default configuration of IUS PHP-FPM packages (not in stock 
CentOS/RHEL). So I have httpd running as 'apache' and PHP running as 
'php-fpm'. I'm aware of special use cases where a configurable PHP user 
is a nice feature, but how do i handle filesystem setup for this default 
configuration in a pretty and secure way? Do people use it like that or 
do they change PHP-FPM user back to 'apache' (like in RH packages)? All 
of the setups i tried (eg. using ACLs) don't really look "pretty" and 
"robust", something I'd like to have when using "default" 
configurations. I hope I'm not thinking too complicated...

Thanks for feedback
matthias

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org