If a user do manual backup from the interface and then download the backup, a copy of the backup which is first saved in the folder `/var/backup/webXX/manual_xxxx.gz` is made on the folder `/var/www/client/clientXX/webXX/backup/manual_xxxx.gz` and a user FTP can download it. But he can't remove it. The client cannot remove a backup from the interface, he can remove a backup so the backup `/var/backup/webXX/manual_xxxx.gz` will be removed but it will not remove the one downloaded in /var/www/client/clientXX/webXX/backup/manual_xxxx.gz`. I have try also doing a `chmod 755` in the file `/var/www/client/clientXX/webXX/backup/manual_xxxx.gz` but the user FTP could not removed it. It seems a cron removed them after a while (every weeks ?) I have for example this type of files Code: ls -ll /var/www/pp.example.com/backup/ total 6114864 drwxr-x--- 2 root client21 4096 27 mai 16:16 ./ drwxr-xr-x 12 root root 4096 30 juin 2025 ../ -rw-r----- 1 web44 client21 6261605863 27 mai 16:17 web44_2026-05-27_00-50.tar.gz We are using a ISPConfig with last release 3.3.0p3 with a debian 12 Bullseye
We discover the permissions on some sites for folder `/var/backup` is 750, so the user can't mv or delete the file, if we `chmod 770 ` it's OK Permissions are very diffferents ?? Code: ls -d /var/www/*/backup drwxr-x--- 2 root client14 4096 27 mai 11:33 /var/www/a.tld/backup/ drwxr-xr-x 2 web65 client36 4096 6 mai 15:03 /var/www/b.tld/backup/ drwxr-xr-x 2 web49 client25 4096 26 août 2025 /var/www/c.tld/backup/ drwxr-x--- 2 root client6 4096 27 mai 11:34 /var/www/d.tld/backup/ drwxr-xr-x 2 root root 4096 10 juil. 2023 /var/www/e.tld/backup/ drwxr-xr-x 2 web51 client26 4096 8 sept. 2025 /var/www/f.tld/backup/ drwxr-xr-x 2 root root 4096 19 févr. 2024 /var/www/g.tld/backup/ drwxr-xr-x 2 web52 client28 4096 15 oct. 2025 /var/www/h.tld/backup/ drwxr-xr-x 2 web56 client35 4096 19 janv. 14:21 /var/www/i.tld/backup/ drwxr-x--- 2 root client0 4096 27 mai 11:34 /var/www/j.tld/backup/ drwxr-xr-x 2 web48 client24 4096 21 juil. 2025 /var/www/k.tld/backup/ drwxr-xr-x 2 root root 4096 11 sept. 2024 /var/www/l.tld/backup/ drwxr-xr-x 2 root root 4096 3 sept. 2024 /var/www/m.tld/backup/ drwxr-xr-x 2 web55 client31 4096 6 janv. 12:46 /var/www/n.tld/backup/ drwxr-xr-x 2 root root 4096 1 mars 2024 /var/www/o.tld/backup/ drwxr-xr-x 2 web46 client22 4096 8 juil. 2025 /var/www/p.tld/backup/ drwxr-x--- 2 root client21 4096 28 mai 07:36 /var/www/q.tld/backup/ drwxr-xr-x 2 web57 client32 4096 4 mai 00:30 /var/www/r.tld/backup/ drwxr-xr-x 2 root root 4096 18 juin 2024 /var/www/s.tld/backup/ drwxr-x--- 2 root client29 4096 27 mai 16:38 /var/www/t.tld/backup/ drwxr-xr-x 2 root root 4096 6 avril 2023 /var/www/u.tld/backup/ drwxr-xr-x 2 web45 client0 4096 1 juil. 2025 /var/www/v.tld/backup/ drwxr-xr-x 2 root root 4096 20 févr. 2024 /var/www/w.tls/backup/ drwxr-xr-x 2 web43 client0 4096 10 juin 2025 /var/www/aa.tld/backup/ drwxr-xr-x 2 web54 client29 4096 15 déc. 11:53 /var//www/ab.tld/backup/ drwxr-xr-x 2 web66 client36 4096 6 mai 15:31 /var/www/ac.tld/backup/ drwxr-x--- 2 root client34 4096 28 mai 12:13 /var/www/ad.tld/backup/ drwxr-xr-x 2 web63 client15 4096 5 mars 14:39 /var/www/ae.tld/backup/ drwxr-xr-x 2 root root 4096 19 févr. 2024 /var/www/ef.tld/backup/
Users shall not be able to delete files from /var/backup at all, if they would be able to do that, then they could mess up the whole backup system of your server. /var/backup is the internal backup storage. If a user wants to access a backup and he requests it in the GUI, then the backup is copied to his backup folder in his website temporarily, which is /var/www/client/clientXX/webXX/backup/. he never accesses anything in /var/backup/ directly.
Sorry for the mistake... Is wrong I am talking about the folder `/var/www/client/clientxx/backup` here
Ok, I'll have to look into the code. I guess ISPConfig might remove the backup automatically after some time. But I'll have to check.
