VirtualHost Include File/Folder Permissions?

vatra

• May 16, 2026 15:15
• Edited

I'm hardening Apache include files permissions and testing whether 700 permissions on include directories and 600 permissions on include files are fully supported.

Apache itself appears to work correctly with these permissions, including rebuilds and restarts. However, some include files are automatically generated and managed by WP Toolkit.

Before standardizing this setup, I’d like to confirm whether WP Toolkit or any cPanel component expects broader read permissions (such as 644/755) for userdata include files or their parent directories, or whether 600/700 is considered fully supported and safe long-term?

• 

  cPRex Jurassic Moderator

  • May 26, 2026 14:20

  Hey hey - what an excellent question!

  A quick test include at 600 seems to work well on my system, but I'm not finding anything on my end that says they need to have any particular permissions one way or another.  Since everything in /etc/apache2/conf.d/includees is 600 already, except for any ModSec or Imunify files you may have in there, I don't see why this wouldn't work since root is the only one managing those.

  1
• 

  vatra

  • May 29, 2026 07:50

  Thank you Rex,

  the only thing I'm still not sure about is the WP Toolkit. Does root manage those as well?

  0
• 

  cPRex Jurassic Moderator

  • May 29, 2026 14:28

  Can you let me know specifically what you're looking for in regards to WP Toolkit?  I don't see how that tool would need any access to the include files on the system.

  1
• 

  vatra

  • May 31, 2026 10:57
  • Edited

  WP Toolkit puts its settings into:

  /etc/apache2/conf.d/userdata/std/2_4/USER/DOMAIN/wp-toolkit.conf
  /etc/apache2/conf.d/userdata/ssl/2_4/USER/DOMAIN/wp-toolkit.conf

  I was just wondering if there will be any conflict if I make these 600/700?

  0

Please sign in to leave a comment.