Hi,
On my moodle server the backup script (which came with installation) writes to $CFG->dataroot (moodle_data), but my $CFG->dataroot directory is owned and grouped by apache, so students uploading can see backupdata that they should'nt see.
The $CFG->dataroot (moodle_data) , houses all the system data as well as backups. Should they be together?
Is it a case where the backup data directory should have permission set and be owned by root.
On the moodle site admin -> courses -> backups ->
there is an option at the bottom to save backups to a different location , will this work.
I can't understand your problem, may be I'm overlooking something.
> On my moodle server the backup script (which came with installation) writes to $CFG->dataroot (moodle_data), but my $CFG->dataroot directory is owned and grouped by apache,
Both are normal.
> so students uploading can see backupdata that they should'nt see.
Do you mean the directory "backupdata"? Only _teachers_ are supposed to see that.
> the backup data directory should have permission set and be owned by root.
The running apache process won't be able to write in to that directory, unless apache write suid root which is a big no-no.
> On the moodle site admin -> courses -> backups ->
there is an option at the bottom to save backups to a different location , will this work.
Never tried that.
> On my moodle server the backup script (which came with installation) writes to $CFG->dataroot (moodle_data), but my $CFG->dataroot directory is owned and grouped by apache,
Both are normal.
> so students uploading can see backupdata that they should'nt see.
Do you mean the directory "backupdata"? Only _teachers_ are supposed to see that.
> the backup data directory should have permission set and be owned by root.
The running apache process won't be able to write in to that directory, unless apache write suid root which is a big no-no.
> On the moodle site admin -> courses -> backups ->
there is an option at the bottom to save backups to a different location , will this work.
Never tried that.