cfml

When the auto-lockdown tool sets file system permissions, does it do that for directories only, or actual files?
I'm thinking it must set them for site directories only, otherwise you'd have to run it again whenever you added new files to your app.
In other words, can I run it after the site directory has been created, but before the site files are there?

Bump, if that's a thing here...

While I'm asking about the lockdown tool, I'm unclear on how to handle cloning the configuration settings from the existing app.

First, my understanding is that either CFConfig or the admin's CAR archiving tools can be used to export settings from the existing CF 2018 app, and import them on the new CF 2021 servers. Does anyone have any thoughts on which of those is the better strategy, and any major gotchas to look out for?

Second, I assume the lockdown tool adjusts settings too, so I'd guess the process would be to first import from the existing app, *then* run the auto lockdown tool. Is that right? The lockdown guide doesn't mention importing settings from an existing app.