Final file permission settings for secure site?

Me again, more calm version ...

I can’t find info on the file permission settings once MODx is installed.

What I’d like to know is which files need "[whatever]-only" access specification so that all dark intruders are instantly foiled and no fun-house stuff gets implanted?

Thanks for any help with this,
Wendy

That depends on your server configuration. If you are running some kind of suexec, then nothing needs to be world-writable. Otherwise, any folders or files that get written to , such as the cache folder and the images folder as well as the export folder need to be world-writable so the scripts can write to them.

Everything else should be writable by owner, readable by everybody else.

Suexec is enabled by the hosting company (and can’t be disabled, in fact), I’ve just verified.

If you are running some kind of suexec, then nothing needs to be world-writable.

So I should check that all files are non-writable, and also readable, then?