/var/empty must be owned by root and not group or world-writable