Securing nginx: Workers per server block under specific user?

[Alexander Kunz - Wishmedia GmbH]

Am 26.08.2013 13:23, schrieb Valentin V. Bartenev:
> On Monday 26 August 2013 15:14:32 - - wrote:
> [...]
>> That
>>  is really bad because I would have the same security problem as I had
>> before with cherokee. With one line of php he could read from any "site"
>>  folder (see above). I could tackle that problem by assigning rwx------
>> permissions to all files, but then I would probably be busier with
>> changing file permissions that developing websites ...
>>
> 
> Nginx doesn't execute php, so what is the problem then?
> 
>   wbr, Valentin V. Bartenev


Try to use php-fpm, there you can define pools with a specific username
for each pool.

Kind regards

Alexander Kunz