I just noticed that the /web folders of sites on my server have some different permissions, some are mode 755, some 751, some 775, and most are either 711 or 750. I don't know the differences in how they were all created (php enabled or not, suexec enabled or not, etc.), but it was all via the ui at different times (this server is maybe 2-3 years old?). I propose they are always set mode 750 if suexec is enabled, and ... maybe 751(?) if suexec is disabled (not positive on that from memory). I'm probably overlooking some cases, so tossing this out for discussion.
We tested 750 or not tested, we released a new ISPConfig version whith that setting and it caused issues on many systems (websites became unavailable etc.). If it works or not even depends on the file system type and if it's remotely mounted. So while 750 is definitely preferred, we had to use 751 at the end. But it might be useful to add a switch to allow admins to select between 750 and 751 mode on their system.
