Tried to give a user shell access this morning and while testing I noticed they had elevated privileges. I then looked at permissions in /var/www and the user and group owns all subdirectories. I screwed this up - I changed administrators and forgot to Obviously they should own their own dir and any other users should own their own - but what about the rest? www-data? These are the directories I'm unsure of: www-data webalizer sharedip apache2-default thanks in advance!