Question

How do you setup proper group and user permissions on Centos for multiple WordPress installs?

I have a CentOS box running with multiple WordPress installs. Here are the steps I followed to setup each directory and install.

  1. Created folder within /var/www/{websiteurl}
  2. Created config inside httpd for multiple domains
  3. Created a new user for each website and added them to a group called clients
  4. chown newuser:newuser /var/www/[userwebsite folder]
  5. Confirmed all permissions were set to meet WordPress hardening requirements. https://codex.wordpress.org/Hardening_WordPress 644 for files and 755 for directories

Now, however since making these changes from apache:apache owning all of the file my users can not upload to /wp-content/uploads. What changes do I need to make to make this happen? I would like to ensure the most amount of security, but also give my users the ability to upload files and install plugins. To patch the issue for now I chown apache:apache /var/www/[userwebsite]/public_html/wp-content/uploads/

Thanks for any suggestions or help you can provide.

Subscribe
Share

Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hi!

One option to solve this issue would be chowning the uploads directories’ to apache:apache and adding your users to the apache group. This will allow Apache access only to the directories that it should write to while still allowing your users access to everything. However, this will require you to chmod the directories to 775 and the files to 664 in order to allow the members of the group that owns them (apache, as in the other users) to write to them.