Would it be safe to say only the files directory should be owned by apache user ?
I have mine set files apache:root
And all other drupal directories root:root
?
My permissions are set to 755 for everything excepting 444 on settings.php
Actually my files I've set to 775 and have
in www chown -R root:apache html
then chown -R apache:root files