best approah (security) to do some admin work through web page in Linux?

Question

Hello,

I want to build a web based admin tools that allow the system admin to run pre-configured commands and scripts through a web page (simple and limited webmin), what is the best approach?

I already started with Ubuntu installing LAMP and give the user www-data root's privileges !!! as I learned (please check the link) this is a really bad move !!!, so how to build such web-based system without the security risk?

Answer 1

I already started with Ubuntu installing LAMP and give the user www-data root's privileges

Don't do this.

If you really want to execute some very specific scripts under root privileged. Create such predefined very limited scripts, allow their password-less execution with sudo for specific user and then run them via script and don't forget authentication.

Generally this is bad idea.