Looks like apollo13 needs to write to uploads directory. Our security posture requires 444 permissions on files and 555 permissions on the directories (no writes allowed)
What would be a proper way to implement this with apollo13? Does apollo13 need to write to uploads directory after it creates initial images in apollo13_images?
Comments
So how WordPress will be able to write to uploads directory?
I am not sure I understand situation correctly, but with these settings nor WordPress nor other plugins will be able to create anything in this directory.
I am not server expert so it is hard to give any solid advice here. Images are only created on request. So if you visit all albums, works, posts and you don't plan on changing/adding anything in future then you can disable it. Theme generally use same way to store images like WordPress.
Does it help somehow?
With kind regards.