Any reason why the permissions in the mkdir of the file engine/classes/ElggDiskFilestore.php (line 294 elgg 1.8.19) needs to be 700.
I might be dumb, but with apache user as nologin its tough to do a remote backup of my instance with directories that are only readable only by the apache user.
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
- iionly@iionly
iionly - 0 likes
- buraddo@buraddo
buraddo - 0 likes
You must log in to post replies.Could be 700 to avoid problems due to missing permissions for creation a folder with more liberal access permissions which might only root be allowed to create (and not the apache user).
OK.. So far seems like no problems are going to be caused if I give group read permissions. This will allow me to backup effectively...
Surprised no one else has found this a problem when executing backups. Must be backing up as root or using a multipurpose account as the apache user..
B