blang - 12:51 pm on Jan 30, 2010 (gmt 0)

Excellent thread, lots of good info here. Flagging this for reference.

A 0750 permission for the dot-file is fine, ***as long as the `apache-user' does not own the directory***

@AlexK> Would you mind detailing the reasoning behind this? I've been a Linux user for 12 years and have acted as sysadmin on a couple of servers for almost as many, and I don't understand your logic. If the directory had group write permissions, then you've got a problem. Having read and execute perms is standard for any directory. This isn't to start an argument, I sincerely want to know if I'm missing something.