My document dataroot (config.php) and is writeable by www-data, Is this an issue?

My document dataroot (config.php) and is writeable by www-data, Is this an issue?

by Doulos Xavier -
Number of replies: 2

This document https://docs.moodle.org/405/en/Upgrading mentions that

chown -R root:root moodle (Linux debian - or even create a user especially for moodle. Don't use the web server user, e.g. www-data)

My document dataroot (config.php) and is writeable by www-data, Is this an issue?

var/www/mywebsite/moodledata

drwxr-xr-x 13 www-data mywebsite 4096 Mar 26 11:04 moodledata/

Average of ratings: -
In reply to Doulos Xavier

Re: My document dataroot (config.php) and is writeable by www-data, Is this an issue?

by Andrew Lyons -
Picture of Core developers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Peer reviewers Picture of Plugin developers Picture of Testers

No, this is correct. This is where Moodle stores your user data. Moodle is a web application and runs on a web server. Typically (on Debian/Ubuntu/some others) the web servers runs as the www-data user so it needs access to this location to write your files.