Thank you for the input. Very useful as its coming straigh from WordPress.
Interestingly I could not find the below from anywhere. Do I need to be worried?
600 -rw------- /home/user/cgi-bin/php.ini
711 -rwx--x--x /home/user/cgi-bin/php.cgi
100 ---x------ /home/user/cgi-bin/php5.cgi
And any ideas about the below as these were not mentioned. Or am I jst better off not touching them and just leave them as defaults?
index.php 400
wp-blog-header.php 400
wp-config.php 400
xmlrpc.php 400
root 705
wp-admin 701
wp-content 705
wp-includes 701
Thanks for any advice.