Comment 22 for bug 1964881

> if Debian maintainers would agree on using `root:adm` in their side

That would still leave the java-produced logs with a different ownership (tomcat:adm), because they are written to by a process that runs as tomcat:tomcat.

I still don't see a nice way out what will work without any delta at all in ubuntu.