A few more, from my notes: These were the default permissions of the apache log dir: # ls -ld /var/log/httpd/ drwx------ 2 root root 4096 Jan 18 12:09

A few more, from my notes: These were the default permissions of the apache log dir: # ls -ld /var/log/httpd/ drwx------ 2 root root 4096 Jan 18 12:09 /var/log/httpd/ I guess their expectation is that only root should ever need to read a log file? Contrast this with Debian, which gives read access to admins: $ ls -ld /var/log/apache2 drwxr-x--- 2 root adm 4096 Jan 16 06:25 /var/log/apache2 Redhat also decided to stick wsgi sockets into the log dir. If you try to run a wsgi process as anyone other than root, you get a permissions error: (13)Permission denied: mod_wsgi (pid=31431): Unable to connect to WSGI daemon process 'bob' on '/etc/httpd/logs/wsgi.1965.3.1.sock' after multiple attempts. To fix this problem, you have to tell wsgi to stick its socket files somewhere more reasonable, like /var/run (which is what Debian does by default). When you look up the modwsgi "Common Problems" page, the very first entry describes exactly this issue... https://code.google.com/archive/p/modwsgi/wikis/ConfigurationIssues.wiki https://code.google.com/archive/p/modwsgi/wikis/Configuratio... 'cfdisk' was removed from the distro because it was "a pile of junk". Really? That's funny -- I've used it to create dozens of Debian partitions and never had a problem. https://partner-bugzilla.redhat.com/show_bug.cgi?id=53061 https://partner-bugzilla.redhat.com/show_bug.cgi?id=53061