I have installed OJS successfully and (2.4.8 and 3.1) versions successfully and during setup I gave full permission to couple of files (the ones mentioned in the read-me file) so shall I revoke these full-permissions after the installation is done? What measures should be taken to better secure the site after the installation is done?
Also I checked the “secure your OJS installation” on this page
and it says the following about “restricting the file permission”
4- Restrict File Permissions: Getting OJS file permissions right is one of the most important factors in maintaining the security of OJS installation. We use restrict file permissions for better security while maintaining OJS functionality.
But it doesn’t say what files should be restricted and how, any ideas, tips on that and how to implement it?