[cobalt-security] who should own the /home/sites/home/users and /home/sites/home/web ?

[P Ferwerda <loptson@xxxxxxxxxxxx>]

On a RAQ3, which user should own the /home/sites/home/users and /home/site/home/web directories:

This is what I've got:
drwxrwsr-x   8 nobody   home         1024 Sep 15 10:31 .
drwxr-xr-x   6 root     root         1024 Nov 30 20:10 ..
drwxr-sr-x   2 admin    home         1024 Aug 25 11:29 backups
drwxr-s---   2 nobody   home         1024 Dec 15  2000 certs
drwxr-s---   2 nobody   home         1024 Nov 30 04:03 logs
drwxrwsr-x   7 admin    home         1024 Oct  5 19:17 software
drwxrwsr-x   4 httpd    home         1024 Sep 17 16:37 users
drwxrwsr-x   3 httpd    home         6144 Nov 30 20:04 web

And for /home/sites/site6 I've got:
drwxrwsr-x   7 nobody   site6        1024 Nov 30 20:06 .
drwxr-xr-x   6 root     root         1024 Nov 30 20:10 ..
drwxrwsr-x   2 root     site6        1024 Oct  4 16:26 certs
drwxr-s---   3 nobody   site6        1024 Oct  4 16:25 certs_sav
drwxr-s---   2 nobody   site6        1024 Nov 30 04:05 logs
drwxrwsr-x   4 root     site6        1024 Nov 30 20:06 users
drwxrwsr-x   8 nobody   site6        2048 Nov  4 10:14 web

Note that .../site6/web is owned by nobody wheras for the primary site it is owned by httpd.
Which should it be?

Thanks,
Paul