I found my own answer...
https://docs.moodle.org/28/en/Security_recommendations#Most_secure.2Fparanoid_file_permissions
Security and privacy
2.7.1 Permissions
This discussion has been locked because a year has elapsed since the last post. Please start a new discussion topic.