5

I have a directory with the following details:

drwxrwxr-x 6 root devs 4.0K Sep  9 14:57 project_dev

Now I want www-data (Apache daemon) to have an access to this directory, so in my mind I am planning to add www-data to group devs. However I fear that I would cause wreckage if I execute this:

usermod -a -G devs www-data

Inputs please.

Frands Hansen
  • 4,677
Leandro Garcia
  • 535
  • 2
  • 8
  • 15

1 Answers1

5

You won't break anything, but you might cause a security issue, since anyone accessing the www-data account (php scripts, unpatched, hacked pages, etc.) will get read/write access to everything that the 'devs' group has.

"www-data" already has read access to that folder, try limiting the write access to just the files it really really needs to write to.

mulaz
  • 10,962