REWORK: tomcat7 group may or may not exist. Can't depend. Set to 755 and root.root