Norbert Veber <nveber@debian.org> writes: [...] > or that no file must be owned by [...] "www-data", No way. If apache runs as www-data and you are using things like mod_dav (WebDAV), then apache must have full access to any html documents an directories to be maintained via WebDAV. Ie they *must* be owned by www-data. -- +++ BUY Snakeoil XP -- the most secure Snakeoil ever +++