# Log files must not be world readable because they may contain sensitive
# information
non-standard-dir-perm 0750 != 0755 *var/log/apache2/*
# The default configuration refers to this directory. Thus it should exist on
# default installations.
package-contains-empty-directory [*usr/lib/cgi-bin/*]

# Apache uses var/www/html/ as a new default document root
# See #730372 and https://lists.debian.org/debian-devel/2012/04/msg00301.html
dir-or-file-in-var-www *var/www/html/*
# Second update-rc.d call is to disable the service
duplicate-updaterc.d-calls-in-postinst apache-htcacheclean *