I have a web server setup on a machine that has Apache serve to the public internet. There are a couple trusted users that I would like to be able to edit php files on the server. I'm not sure the best way to set the file or group permissions to allow this.
My permissions current look like this:
drwxr-xr-x 8 root http 4096 Oct 18 22:07 . -rw-r--r-- 1 root http 269 Aug 25 16:42 index.php drwxrwxr-x 2 root http 4096 Feb 7 01:53 logs drwxr-xr-x 2 root http 4096 Dec 16 13:08 .well-known
The users are not currently in the
http group. I also am not sure I want that group to be able to write to those files, since that would allow a flaw in Apache to write to them then serve them.
I do have
sudo available but I'd like to avoid adding those users to the
What is the idiomatic way to allow local machine users to edit served files while keeping the web server itself more strict?