Question

i’m asking what’s the best linux permission to drupal files in the purpose to secure it.
My setting.php is under 444 but the others are 755 .
Thank you

Answer 1

440 is fine for the settings file. For the others do:

Navigate to sites/default folder:

chown -R :www-data files

Then give you and web server read/write permission to files folder (‘s’ makes the files inside the directory inherit these permissions.)

chmod g+ws files

If you need to overwrite previous created files’ permissions do (navigate to sites/default/files):

find . -type d -exec chmod g+ws {} \;
find . -type f -exec chmod 664 {} \;

Now your web server can read/write but not execute files in the files directory.