Ubuntu 16.04, Apache2
App that I am using employs Java to run, and uses some kind of a license file. When you run the app, it writes and then reads from a file in the user's home dir. So I am trying to run the app as part of a cgi script, therefore it runs under www-data account, which by default has no home dir ($home is blank for user www-data). So the app tries to write to /var/www for which www-data has no write rights, causing the app to crash. Its a big deal to get the app changed. App runs fine under ordinary user account, leaving behind a [gibberish].dat file in $home App is Denkovi v2.6
So what is the risk of me creating /home/www-data and setting it as the home dir for www-data via usermod? Am I exposing my system to a major risk through the web interface by doing so?
If there is a simpler/better way to do this, please educate me!
0 Answers