- install drupal modules/themes as root:daemon rather than www:www
(only the files/ directory needs to be writeable by 'www').
- don't install 'settings.php' world-readable since it contains the
DB password. Use 640, owner 'www' instead.
- bump all modules.
tested in production, including upgrade szenarios.
ok sthen@ and landry@, maintainer timeout.
NOTE: The included copy of the jQuery UI datepicker in the Date Popups
module has been removed. It is now necessary to install the jQuery UI
module for the Date Popups datepicker to work.
Full list of changes at http://drupal.org/node/70963/release
