Django [Errno 13] Permission denied: ‘/var/www/media/animals/user_uploads’

by

I have solved this myself in the end.

When running on the development machines, I am in fact running using my current user’s privileges. However, when running on the deployment server, I am in fact running through wsgi, which means it’s running using www-data‘s privileges.

www-data is neither the owner nor in the group of users that own /var/www. This means that www-data is treated as other and has the permissions set to others.

The BAD solution to this would be to do:

sudo chmod -R 777 /var/www/

This would give everyone full access to everything in /var/www/, which is a very bad idea.

Another BAD solution would be to do:

sudo chown -R www-data /var/www/

This would change the owner to www-data, which opens security vulnerabilities.

The GOOD solution would be:

sudo groupadd varwwwusers
sudo adduser www-data varwwwusers
sudo chgrp -R varwwwusers /var/www/
sudo chmod -R 760 /var/www/

This adds www-data to the varwwwusers group, which is then set as the group for /var/www/ and all of its subfolders. chmod will give read, write, execute permissions to the owner but the group will not be able to execute any script potentially uploaded in there if for example the webserver got hacked.

You could set it to 740 to make it more secure but then you won’t be able to use Django's collectstatic functionality so stick to 760 unless you’re very confident about what you’re doing.

More Related Contents:

  1. using pip3: module “importlib._bootstrap” has no attribute “SourceFileLoader”
  2. Run Python script at startup in Ubuntu
  3. Target WSGI script cannot be loaded as Python module
  4. How would I build python myself from source code on Ubuntu?
  5. Django server killed frequently
  6. How to update-alternatives to Python 3 without breaking apt?
  7. How to upgrade Python version to 3.7? [closed]
  8. Django populate() isn’t reentrant
  9. WARNING: Running pip as the ‘root’ user
  10. How to split a huge csv file based on content of first column?
  11. How do I ‘lock the keyboard’ to prevent any more keypresses being sent on X11/Linux/Gnome?
  12. gunicorn command not found, but it’s in my requirements.txt
  13. Fatal Python error: init_fs_encoding: failed to get the Python codec of the filesystem encoding, when trying to start uwsgi
  14. Uninstall python built from source?
  15. django apache configuration with WSGIDaemonProcess not working
  16. Apache not serving django admin static files
  17. How to Copy/Clone a Virtual Environment from Server to Local Machine
  18. Install mod_wsgi on Ubuntu with Python 3.6, Apache 2.4, and Django 1.11
  19. python_2_unicode_compatible error
  20. Apache mod_wsgi error: Forbidden You don’t have permission to access / on this server
  21. Django CSRF check failing with an Ajax POST request
  22. How can I enable CORS on Django REST Framework
  23. Django upgrading to 1.9 error “AppRegistryNotReady: Apps aren’t loaded yet.”
  24. Iterating through two lists in Django templates
  25. Custom ordering in Django
  26. How do I extend the Django Group model?
  27. Django REST Framework serializer field required=false
  28. What’s the best solution for OpenID with Django? [closed]
  29. QuerySet, Object has no attribute id – Django
  30. Python multiprocessing linux windows difference

Leave a Comment