Restrict moodledata directory permissions

CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [v0.1.5] - 2018-09-25
+### Changed
+- Update directory permissions on moodledata directory
+
 ## [v0.1.4] - 2018-09-14
 ### Added
 - New ENV variables to configure HTTP and HTTPS ports for Nginx

dc.deb.yml

@@ -21,7 +21,7 @@ services:
       - "${PHP_VERSION}-${MOODLE_VERSION}"
       #
       - "--iteration"
-      - "v0.1.4"
+      - "v0.1.5"
       #
       - "--deb-changelog"
       - "/package/CHANGELOG.md"

nginx-php-moodle/bin/configure-moodle.sh

@@ -25,6 +25,9 @@ echo "Waiting for PHP-FPM to come up..."
 if wait_for_success "/etc/init.d/php7.2-fpm status"; then
     echo "PHP-FPM started!"
 
+    echo "Fixing permissions on moodledata directory..."
+    chown -R www-data:www-data /opt/moodle/moodledata
+
     echo "Waiting for PostgreSQL to come up..."
     if wait_for_success "/usr/bin/php${PHP_VERSION} -f /usr/local/bin/check_db.php" 120 10; then
         echo "PostgreSQL started!"

systemd/postinst.sh

@@ -27,7 +27,7 @@ echo "Checking Moodle data directory"
 if [ ! -d /opt/moodle/moodledata ]; then
     echo "Creating Moodle data directory"
     mkdir -p /opt/moodle/moodledata
-    chmod 777 /opt/moodle/moodledata
+    chmod 770 /opt/moodle/moodledata
 else
     echo "Moodle data directory already exists"
 fi