PHP / Apache2生产Web权限和所有权

Question

I was always curious what is the best practice for production web pages ran by Apache2 and PHP of folder ownerships and permissions.

Lets say /srv/www/my-web is a public folder accessed via http.

How the ownership and permissions should be set to be as restrictive as possible?

My example would be:

drwxr-xr-x my-user:www-data /srv/www/my-web
-rw-r--r-- my-user:www-data /srv/www/my-web/index.php    

drwxrwxr-x my-user:www-data /srv/www/my-web/cache
-rw-rw-r-- my-user:www-data /srv/www/my-web/auto-generated-file.php

Answer 1

Typically:

Folders: 755 or rwxr-xr-x
Files: 644 or rw-r--r--

find /[webroot] -type d -exec chmod 755 {} \; //set all directories to 755
find /[webroot] -type f -exec chmod 644 {} \; // set all files to 644