Am I doing this right? [remote development]

[pgr]

See here

Harden security...

I agree with using a 0 for World permissions. But you need to keep the distinction from the recommended installation procedure, about some directories requiring write access, while others don’t need it. Anyway, I don’t like our current permissions instructions. We should really make better ones, remove all “world” permissions, suggest a nice scheme where access happens from the Group bits, not the Owner bits. A few code tweaks would also be very beneficial in the area of permissions. This is m…

I also do things like you, by adding my personal user to www-data group.

There might be other factors influencing things:

• .htaccess limitaitons
• selinux restrictions
• problems with SetUID or SetGID bits, causing new directories to be created with inferior permissions