We are trying to harden an Apache/MediaWiki/MySQL installation. According to MediaWiki's Manual:Securing database passwords:
... many Unix/Linux users can simply secure LocalSettings.php just by setting its permissions with chmod 600 as recommended in LocalSettings.php#Security. Such users need read no further.
I'm speculating the above presumes
LocalSettings.php is owned by
apache or similar. If ownership was
root:apache, then I'm guessing the recommendation would probably be 0660.
Why does Apache need write access