Joey Hess <joey@kitenet.net> writes: >> www-data:*:33: > > Some web browsers run as www-data. Web content should *not* be ^^^^^^^^ servers (e.g. apache) > owned by this user, or a compromised web server would be able to > rewrite a web site. Data written out by web servers, including > log files, will be owned by www-data. -- People said I was dumb, but I proved them!