Re: [users@httpd] Apache and nextcloud - insecure ? [EXT]

2020-09-03 Thread Darryl Philip Baker
When you think about It NextCloud is running as part of the web server so in your case www-data. You are going to want NextCloud to be able to write to the disk therefore www-data needs to write to the disk. If you have data other than the stuff you are giving NextCloud access to I would have a

RE: [users@httpd] Apache and nextcloud - insecure ? [EXT]

2020-09-03 Thread James Smith
Not sure what Nextcloud is - but this is often common amongst "black-box" web apps that bootstrap themselves, and handle upgrades from the UI interface. The webserver has to be able to re-write it's own files for the upgrades. Scary and against all "normal" secure procedures if you manage yo