What user should PHP-FPM run under for better security?

Question

PHP

A question about the correct and secure configuration of the CentOS 7 + Nginx + PHP-FPM bundle
nginx runs as the nginx user < Someuser
/var/www/someuser root folder < Site root What user should php-fpm be configured for? If you configure it so that php-fpm works under someuser, then everything is fine, but is it safe?
/var/www/someuser/www/somesite/

Answer 1

www-data

Answer 2

In fact, Nginx has nothing to do with php-fpm, it doesn’t call it, it proxies it, so it’s enough to create a user (although now when installing php-fpm in many distros, it registers itself during installation) and create rights to the directory with the site

Answer 3

For example: nobody