(In reply to vcizek@suse.com from comment #1) > I guess thttpd doesn't have many users these days and the makeweb binary has even less. True. There's a lot of old packages in our permissions profiles. As long as we ship such packages we try to make things consistent nonetheless. > The current Factory permissions.easy profile fixes the mode to 2755, however > permissions.secure does indeed set the useless 2750 (it's apparently even > documented there) Indeed it's documented. I didn't catch that before. > I'll update the package to set the permissions to 2751. > If the security team is fine, then we could set it also in the secure profile. Very good. Thank you for your support in this. I will adjust the permissions profile accordingly together with a bunch of other changes in a while.