i am writing an web application, which allows an admin user to login and change the settings of the application (name of mysql db, etc) which i will store in a config file.

currently i am developing this on linux mint (my desktop) but mint probably isn't the target distro.

how should i set the permission on the .conf file ?
currently apache looks it is running as www-data

should i

  1. just make www-data the owner of the conf file
  2. change who apache runs as
  3. change the permission of the conf file