I'm working on my new VPS. I have installed Apache and PHP.I made modifications on apache2.conf to make Apache safer and want to do the same thing for PHP.I ran some tests with PhpSecInfo and I have 2 warnings I don't really understand :PHP may be executing as a privileged group, which could be a serious  security vulnerability.  http://phpsec.org/projects/phpsecinfo/tests/group_id.htmlPHP may be executing as a privileged user, which could be a serious  security vulnerability.  http://phpsec.org/projects/phpsecinfo/tests/user_id.htmlWhat should I do to correct that ? Has PHP to be run with a less privileged user such as www-data ? If I do that, what will be the consequences ? Can the forms developped on my VPS (associated with a PHP script to send data to database) still be submitted by people ?When I do  ps aux | grep php I have 2 processed used by root and the two other by www-data :root       664  0.0  0.2 213556 24936 ?        Ss   11:34   0:00 php-fpm: master process (/etc/php/7.0/fpm/php-fpm.conf)www-data   666  0.0  0.0 213556  6188 ?        S    11:34   0:00 php-fpm: pool wwwwww-data   667  0.0  0.0 213556  6188 ?        S    11:34   0:00 php-fpm: pool wwwroot      2336  0.0  0.0  12944  1036 pts/0    S+   12:52   0:00 grep --color=auto phpI looked for informations but I don't understand everything and I really need help on that point in order to give a good level of security to my server. Thanks !
Securisation PHP on VPS Ubuntu
linux;security;php