I’m trying to secure my server and have applied the following permissions:

  chown -R www-data:www-data public
  chmod -R ugo=rx public
  chmod -R ug=rwx,o=rx public/stylesheets/cache
  chmod -R ugo=rwx log

Firstly, are these the permissions you’d recommend? What else can be locked down?

Thanks,
William

I think you are the first to ask for this, so please make an entry to the wiki

What are the default permissions for /path/to/tracks?
I think you can limit the log further o=rx
You should add ug=rwx,o=rx tmp