Who should own html files?

[Paul Howarth]

Tim wrote:
> On Tue, 2006-06-20 at 11:11 +0100, Paul Howarth wrote:
>> They should be owned by whoever will be editing them, as Arthur said. If 
>> nobody's going to be editing them, having them owned by root is fine.
> 
> I'd agree with that for displayable files (HTML, images, etc.).  I'm not
> sure about executables (CGI, etc.).  There's risks with them as the root
> user, and the Apache user.  Is there a good/better way to employ them?

There's no problem with CGI scripts being _owned_ by root, but there 
would be with _running_ them as root.

Paul.