I have a web server setup on a machine that has Apache serve to the public internet. There are a couple trusted users that I would like to be able to edit php files on the server. I'm not sure the best way to set the file or group permissions to allow this.

Server: Apache 2.4 Directory: /srv/http

My permissions current look like this:

drwxr-xr-x  8 root http 4096 Oct 18 22:07 .
-rw-r--r--  1 root http  269 Aug 25 16:42 index.php
drwxrwxr-x  2 root http 4096 Feb  7 01:53 logs
drwxr-xr-x  2 root http 4096 Dec 16 13:08 .well-known

The users are not currently in the http group. I also am not sure I want that group to be able to write to those files, since that would allow a flaw in Apache to write to them then serve them.

I do have sudo available but I'd like to avoid adding those users to the sudoers list.

What is the idiomatic way to allow local machine users to edit served files while keeping the web server itself more strict?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.