I think you may be confusing python package files with processes. What's the command you use to see running processes?
Not all files in the openwisp directory are owned by www-data. In the unfortunate case in which a vulnerability in the OpenWISP python application is found and exploited to write on disk, the attacker wouldn't be able to change much because most important files are not writable by www-data. That's why many files are owned by root and writable only by the owner. Best regards Federico Capoano On Mon, 9 Sept 2024 at 06:01, Logunath K <[email protected]> wrote: > Dear team, > All our processes are running smoothly on the ubuntu > server but when I read the documents it's showing "All processes are > running as the www-data user". > but when I saw in* /opt/openwisp2/env/lib/python3.20site-packages/* *all > processes were running as "root" not as www-data. > > Only in /*opt/openwisp2/openwisp2* path files are in the user "root" > group as "www-data". Does it cause any effect on the server or application? > > I have installed the application via ansible package. > > Regards, > Logu > > -- > You received this message because you are subscribed to the Google Groups > "OpenWISP" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web, visit > https://groups.google.com/d/msgid/openwisp/CAJy2ivpaAJ-esFkeO%2Bp6Xq8Fm%3DC8OXRFMKgWGVOfV%2BiTkLHx6w%40mail.gmail.com > <https://groups.google.com/d/msgid/openwisp/CAJy2ivpaAJ-esFkeO%2Bp6Xq8Fm%3DC8OXRFMKgWGVOfV%2BiTkLHx6w%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "OpenWISP" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web, visit https://groups.google.com/d/msgid/openwisp/CAAGgX6KDMVU3yDA-76LCuTj%2BkbkB2xMDOmT5z7NMqdbvzuCGvg%40mail.gmail.com.
