Add webserver "apache" user to other groups

[davidep (Davide Principi)]

@Technet

so the webserver in some occasions need the write permission

OK, “in some occasions” write permissions are needed. If the normal application life does not require write permissions, could they be granted only during the install/upgrade, and revoked thereafter?

@stephdl

I would be more interested to add more web based features to the shared folder

What are you thinking about?

@Technet

To give read and write permission to the apache (in order to upload ad see file from the web application) user i’ve inserted the apache user in the group owner of the shared folder (not the root of apache webserver). I’ve tested this solution on a server powered by debian and another powered by centos 6. But with nethserver seems doesn’t work…

I ran an experiment by adding apache to ws1, shared folder owner. The commands are:

 # lgroupmod -M apache ws1
 # getent group ws1
ws1:*:5000:admin,apache

Restarted httpd, to update process privileges. Now apache has write access to the shared folder.

The limitation is: if ws1 changes apache is removed from the list. An action could be written to make the change persistent. I’m planning to overtake this limitation in future versions of the Groups module.