I've attempted to set up my wordpress install as recommended in the Codex's "Hardening WordPress" article. That is:
- All files are 644, all folders are 755
- Everything owned by the user account
- wp-content is writeable by the web server account (it's 775 and group-owned by apache's account)
The Codex document says auto-update should work with this setup. But in practice, when I try to update (from 4.2 to 4.31), I get the usual permission error (inconsistent permissions on
update-core.php). If I temporarily change that file to be writeable by the web server account, then update gets past that step (and complains about permissions for a massive list of other files).
So as near as I can tell, it seems that auto-update can't proceed unless most of the files in
wp-admin, are writeable by the web server process - which is exactly what the "hardening" article says to avoid.
Any guesses what the issue might be?