Daan De Meyer authored 4 months ago and Christian Heusel committed 2 months ago

It's questionable whether these directories should always be created
if they're just going to be empty, but they definitely should not be
owned by the _apt user, as _apt is the sandbox user apt uses to perform
downloads and such, and this sandbox user should not be able to modify
apt's configuration files, as that would be a security issue.