# Re: Re: Multiple site with PHP-FPM home directory permission

**URL:** <https://www.ruby-forum.com/t/re-re-multiple-site-with-php-fpm-home-directory-permission/225541>\
**Category:** NGINX\
**Created:** [January 14, 2013, 1:05pm UTC](https://www.ruby-forum.com/t/re-re-multiple-site-with-php-fpm-home-directory-permission/225541 "2013-01-14T13:05:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![aris](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/258eb7/32.png) [@aris](https://www.ruby-forum.com/u/aris)\
**Post date:** [January 14, 2013, 1:05pm UTC](https://www.ruby-forum.com/t/re-re-multiple-site-with-php-fpm-home-directory-permission/225541/1 "2013-01-14T13:05:02Z")

</div>

Thx!

Its working like this.

On 11/01/13 21:07, removed\_email\_address@domain.invalid wrote:

> in the /var/www directory i have all site webroot like:
> 
> domain.tld  
> domain1.tld
> 
> etc…
> 
> every folder have the connected php-fpm user rights like owner and group
> 
> so domain.tld folder user and group is domain.tld  
> and have 0755 permission, so only the owner can write group and  
> everybody  
> else just read.
> 
> I want to restrict this to that only thy owner/group can enter this  
> directory, so i need 0750 flag.  
> In that case the web site no longer loaded i see 404 error and in the  
> log  
> files a permission denied error.  
> Then i realize i need to gain access to the www-data too, because this  
> user try to enter to the main directory.  
> So i add www-data to the domain.tld group, but same problem. I all can  
> get  
> the permission denied.  
> If i set back the 0755 permission, so everybody can read/enter this  
> directory it will working again.
> 
> Is there any way to set a permission that the web page working fine but  
> the directory only accessible by the owner and www-data and root?
> 
> Thx for the help!  
> Peter

chgrp -R www-data .  
find . -type d | xargs chmod 2750

will provide and future proof read access to the web server. I assume  
there is a dedicated php-fpm process for each site, running as the  
appropriate owner.

* * *

nginx mailing list  
removed\_email\_address@domain.invalid  
[http://mailman.nginx.org/mailman/listinfo/nginx](http://mailman.nginx.org/mailman/listinfo/nginx)