Re: Webserver users

[Joerg Sonnenberger <joerg%bec.de@localhost>]

On Thu, Apr 26, 2018 at 08:48:22AM +0200, Frédéric Fauberteau wrote:
> Le 2018-04-25 22:23, Joerg Sonnenberger a écrit :
> > On Wed, Apr 25, 2018 at 06:09:33PM +0200, Frédéric Fauberteau wrote:
> > > We have packages for web applications (www/wordpress, mail/roundcube,
> > > www/php-piwigo...) for which some of their configuration files are
> > > installed
> > > with the permissions of the webserver user.
> > 
> > Personally, I find that hugely annoying and dictating the way the web
> > server setup is done.
> 
> Do you find annoying to setup nginx for running as 'www' user by default? Or
> do you find annoying the setup of web servers in a general way? What could
> be your recommendations to improve the default setup process?

The *only* reason we have this mess is to cater to mod_php users. I'd
say let's inverse that and provide a reasonable setup that works for
all sane setups, i.e. where the application runs as its own user and
with a *group* www, if necessary at all.

Joerg