Hey!
I have Moodle installed on my Plesk-administrated Server.
Moodle is installed manually ans not via the Plesk-Installer as we wanted the newest Version 4.1
Which File Permissions and Ownership should be set on Moodle and on the Moodledata-Directory?
As stated by Moodle (Security recommendations - MoodleDocs) the Owner:Group should be www-data and/or root.
But this is not working.
When installing Moodle via Plesk-Installer, the permissions are as followed:
Is this really the best way to solve the Files in Moodle? Especially the 777/666-Permissions on Moodledata-Files seem suspicious to me, as Moodle itself recommend 700/600.
Setting the Permissions according to the Moodle-Documentation wont work, as Plesk is obviously interfering with the www-data user.
Does anybody have an Idea on how to sell this security-oriented?
Thanks!
I have Moodle installed on my Plesk-administrated Server.
Moodle is installed manually ans not via the Plesk-Installer as we wanted the newest Version 4.1
Which File Permissions and Ownership should be set on Moodle and on the Moodledata-Directory?
As stated by Moodle (Security recommendations - MoodleDocs) the Owner:Group should be www-data and/or root.
But this is not working.
When installing Moodle via Plesk-Installer, the permissions are as followed:
Code:
Moodle-Top-Directory:
Owner: pleskuser
Group: psaserv
Permission: 750
Moodle Files:
Owner: pleskuser
Group: psacln
Permission: 644
config.php -> Permission: 640
Moodle Directories
Owner: pleskuser
Group: psacln
Permission: 755
Moodledata:
All directories but "users":
Owner: pleskuser
Group: psacln
Permission: 777
Users-Directory: 755
Moodledata-Files: 666
Is this really the best way to solve the Files in Moodle? Especially the 777/666-Permissions on Moodledata-Files seem suspicious to me, as Moodle itself recommend 700/600.
Setting the Permissions according to the Moodle-Documentation wont work, as Plesk is obviously interfering with the www-data user.
Does anybody have an Idea on how to sell this security-oriented?
Thanks!