Hi! After Updating snort on 30 (!) SuSE 7.2 boxes the permissions of /etc/rc.config were set to -----w--w- :-((( arber:~ # ls -l /etc/rc.config -rw-r--r-- 1 root root 35265 Feb 8 19:00 /etc/rc.config arber:~ # rpm -Uvh snort-1.8.1-16.i386.rpm snort-1.8.1-16.i386.rpm snort ################################################## Moving snort configuration file snort-lib to new name snort.conf. Convert file reference from snort-lib to snort.conf in etc/rc.config Updating etc/rc.config... arber:~ # ls -l /etc/rc.config -----w--w- 1 root root 35266 Feb 8 19:00 /etc/rc.config arber:~ # rpm -q --scripts snort ... umask 644 <------------------ mv etc/rc.config.new-snort etc/rc.config ... :-((((((((((((( It seems that anybody out there has problems with umask and chmod Syntax. Boys, what a great security Patch!! --- Volker Weinberg volker.weinberg@physik.uni-muenchen.de Dept.of Physics ++49(89)14 56 09 (home) 21 80-24 05 (CIP) Univ. of Munich Andernacher Str. 17, D-80993 Muenchen