Ubuntu
apache2 package

  1. Bug #129920
  2. Comment #1

Comment 1 for bug 129920

Revision history for this message
Ante Karamatić (ivoks) wrote : Re: [Bug 129920] Re: /var/lock/apache2 has wrong owner and group for webdav

Christian Riesch wrote:

> Is it a good idea to fix it like this?

Without looking at the code - *no*. This will enable exploit in web
application to corrupt locking mechanism. For the same reason, web pages
aren't owned by www-data.

I'll take a look at this...