{"action":"created","issue":{"url":"https://api.github.com/repos/viverae-cookbooks/apache2/issues/310","labels_url":"https://api.github.com/repos/viverae-cookbooks/apache2/issues/310/labels{/name}","comments_url":"https://api.github.com/repos/viverae-cookbooks/apache2/issues/310/comments","events_url":"https://api.github.com/repos/viverae-cookbooks/apache2/issues/310/events","html_url":"https://github.com/viverae-cookbooks/apache2/issues/310","id":55163597,"number":310,"title":"Can't restart apache, due to /var/lock/apache2 ACL issue","user":{"login":"DennyZhang","id":1248740,"avatar_url":"https://avatars.githubusercontent.com/u/1248740?v=3","gravatar_id":"","url":"https://api.github.com/users/DennyZhang","html_url":"https://github.com/DennyZhang","followers_url":"https://api.github.com/users/DennyZhang/followers","following_url":"https://api.github.com/users/DennyZhang/following{/other_user}","gists_url":"https://api.github.com/users/DennyZhang/gists{/gist_id}","starred_url":"https://api.github.com/users/DennyZhang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/DennyZhang/subscriptions","organizations_url":"https://api.github.com/users/DennyZhang/orgs","repos_url":"https://api.github.com/users/DennyZhang/repos","events_url":"https://api.github.com/users/DennyZhang/events{/privacy}","received_events_url":"https://api.github.com/users/DennyZhang/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/viverae-cookbooks/apache2/labels/apache-2.2","name":"apache-2.2","color":"fbca04"},{"url":"https://api.github.com/repos/viverae-cookbooks/apache2/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-01-22T15:05:00Z","updated_at":"2015-01-23T17:34:04Z","closed_at":null,"body":"Hi there\r\n\r\nBelow is the error message of running chef update.\r\nI've checked the code, /var/lock/apache2 is changed to root on purpose.\r\nDo you know what's the problem? My OS is Ubuntu 12.04.\r\n\r\n---- Begin output of /etc/init.d/apache2 start ----\r\nSTDOUT: * Starting web server apache2\r\n/var/lock/apache2 already exists but is not a directory owned by www-data.\r\nPlease fix manually. Aborting.\r\n   ...fail!\r\nSTDERR: \r\n---- End output of /etc/init.d/apache2 start ----\r\nRan /etc/init.d/apache2 start returned 1\r\n"},"comment":{"url":"https://api.github.com/repos/viverae-cookbooks/apache2/issues/comments/71230930","html_url":"https://github.com/viverae-cookbooks/apache2/issues/310#issuecomment-71230930","issue_url":"https://api.github.com/repos/viverae-cookbooks/apache2/issues/310","id":71230930,"user":{"login":"joshuacox","id":6137404,"avatar_url":"https://avatars.githubusercontent.com/u/6137404?v=3","gravatar_id":"","url":"https://api.github.com/users/joshuacox","html_url":"https://github.com/joshuacox","followers_url":"https://api.github.com/users/joshuacox/followers","following_url":"https://api.github.com/users/joshuacox/following{/other_user}","gists_url":"https://api.github.com/users/joshuacox/gists{/gist_id}","starred_url":"https://api.github.com/users/joshuacox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/joshuacox/subscriptions","organizations_url":"https://api.github.com/users/joshuacox/orgs","repos_url":"https://api.github.com/users/joshuacox/repos","events_url":"https://api.github.com/users/joshuacox/events{/privacy}","received_events_url":"https://api.github.com/users/joshuacox/received_events","type":"User","site_admin":false},"created_at":"2015-01-23T17:34:04Z","updated_at":"2015-01-23T17:34:04Z","body":"ok, here on debian jessie, if I install apache2 from repos I have:\r\n\r\n```\r\n$ ls -lh /var/lock/|grep apache\r\ndrwxr-xr-x 2 www-data root 40 Jan 23 11:20 apache2\r\n```\r\n\r\nis there any consensus on best practice here?  reading the link\r\n\r\n[Apache 2.2: LockFile] ( http://httpd.apache.org/docs/2.2/mod/mpm_common.html#lockfile )\r\n\r\nit does specifically note that you want to limit access to this lock directory, but it does not state that you should limit it to root only.  As you can see I've got a possible fix at https://github.com/joshuacox/apache2/commit/a2e20dc7b29b630188f6cccae1fc7814449093c9\r\n\r\nbut I'm thinking of removing the group line entirely to match what I got above from the repos.  Any thoughts?"}}