I'm trying to establish a set of secure ownership/permission standards for /var/www on my server. The ownership is either apache or not-apache, and the permissions are anything from 000-777.
Here's my first attempt. I don't consider myself a server admin, or security knowledgable, so I'm looking for suggestion, feedback, and corrections.
/uploads/ Directories apache:666
( So apache and devs can read/write, but not execute? )
PHP files not-apache:665
( so anybody can exec, but only devs can change? )
.htaccess files, and maybe JS and CSS? not-apache:664
( apache can only read, devs can change? )