Securing nginx: Workers per server block under specific user?

Alexander Kunz - Wishmedia GmbH akunz at
Mon Aug 26 11:30:26 UTC 2013

Am 26.08.2013 13:23, schrieb Valentin V. Bartenev:
> On Monday 26 August 2013 15:14:32 - - wrote:
> [...]
>> That
>>  is really bad because I would have the same security problem as I had
>> before with cherokee. With one line of php he could read from any "site"
>>  folder (see above). I could tackle that problem by assigning rwx------
>> permissions to all files, but then I would probably be busier with
>> changing file permissions that developing websites ...
> Nginx doesn't execute php, so what is the problem then?
>   wbr, Valentin V. Bartenev

Try to use php-fpm, there you can define pools with a specific username
for each pool.

Kind regards

Alexander Kunz

More information about the nginx mailing list