Nextcloud 12 - strong directory permissions

phatair · June 1, 2017, 10:50am

Hi,

i found the information, that the strong directory permission script/information was removed in the nc12 documenation.

Is there any recommendation for directory permissions for the NC12 installation?

fifh · June 1, 2017, 12:23pm

It seems you just have to change the ownership on your Nextcloud directories to your HTTP user:
On Centos :

chown -R apache.apache /var/www/html/nextcloud/

linucksrox · June 1, 2017, 12:43pm

You still want to use some sane permissions, I think it’s mentioned somewhere in the documentation but I feel like it’s less obvious now. Anyway, @enoch85 made a script that automates this and still complies with the new standards.

Like @fifh mentioned, you need to set the ownership to the HTTP user. In addition to that, you should also set rw permissions for the owner, read for the group, and none for others.

github.com

nextcloud/vm/blob/master/static/setup_secure_permissions_nextcloud.sh

#!/bin/bash

# Tech and Me © - 2018, https://www.techandme.se/

# shellcheck disable=2034,2059
true
# shellcheck source=lib.sh
. <(curl -sL https://raw.githubusercontent.com/nextcloud/vm/master/lib.sh)

# Check for errors + debug code and abort if something isn't right
# 1 = ON
# 0 = OFF
DEBUG=0
debug_mode

htuser='www-data'
htgroup='www-data'
rootuser='root'

printf "Creating possible missing Directories\n"

This file has been truncated. show original

phatair · June 1, 2017, 2:39pm

Hi,

thanks for your reply.

If i understand it correct, the default persmission should be fine otherwise it should be mentioned in the documentation like in the past.
I’m running my NC12 on a webhosting service and i think i can not change the owner of the nextcloud folder to the http user. That is set by the provider to a group where the http user is a member.

If i try to open https://cloud.mypage.com/apps/files i get an nextcloud page with “permission denied”. I think thats ok, isnt it?