Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am new user of nginx + php-pfm, but I am a little bit confused about security.

For example I am running a few pools with different uid/gid as TCP sockets. So theoritically it is possible that any local shell user can connect to 9000 OR 9001 or any other FPM port and send php code to execute with different uids? How to avoid that? (file sockets is not an option)

share|improve this question

You can't send code to be executed, only path to file to execute. And it has to be readable by the user your FPM pool runs as. So this bad user would have to be able to create a file with permissions to be read by FPM.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .