I am thinking of packaging an application that provides both a web interface (via apache) and a command line interface.
This means that both the www-data and the user running the command line interface need write access to the data directories (/var/lib/package)
Furthermore new files can be created in this directory by both interfaces.
To avoid permission problems it would seem I need to create a new group, add the www-data to it and set the apache umask to 002.
I am thinking about doing this by modifying /etc/default/apache2 from my posinst script.
Is this allowed ? (this file is _not_ a conffile for apache)
If not are there any better ways to do it?