Control: close -1 Hi,
sorry, but this does not make any sense. The package distributed configuration files that are inactive and there is no extra “attack surface” by having a file on the filesystem. I’m closing this. Ondrej -- Ondřej Surý (He/Him) > On 24. 12. 2025, at 22:37, [email protected] wrote: > > Package: php8.4-fpm > Version: 8.4.16-1~deb13u1 > > When APT update it, it created following files in background: > - /etc/apache2/conf-available/php8.4-fpm.conf > > At first I thought you guys installed Apache2 without my consent, but it > seems > you created the file even when the /etc/apache2/ directory does not > exist. > So please don't. Don't create the file unless the user have Apache2. > > Removed /etc/apache2/ for now to reduce attack surface.

