This is a false alarm, since /var/lib/prosody is itself not world-executable. Downgrading severity.
Still, 666 files seem an acident waiting to happen. Perhaps a sane umask should still be used? -- see shy jo
signature.asc
Description: Digital signature