hi, (In reply to Stanislav Brabec from comment #23) > > It was not set in the rpm database. It was set in %post by > %set_permissions %{_bindir}/su > > >> You could check your installation log. Maybe this command failed or you set > > > >where should i look for what? > >/var/log/YaST2/y2log? > Yes. Please check for possible util-linux %post failure. ok, i didn't find anything in /var/log/YaST2/y2log about util-linux. i searched with: grep -i util-linux /var/log/YaST2/y2log > >where can i set this? > > PERMISSION_SECURITY in /etc/sysconfig/security this is what i have in /etc/sysconfig/security regarding PERMISSION_SECURITY: ## Path: System/Security/Permissions ## Description: Configuration of permissions on the system ## Type: string ## Default: "easy local" # # Permission settings to use. By default 'easy', 'secure' and # 'paranoid' exist. You may define your own though. # PERMISSION_SECURITY="easy local" > If you did not touch it, you don't have paranoid more. In this mode, many > things don't work as most users want. i manually never touched that file. > If /etc/permissions.easy does not exist, it will not work. i don't have /etc/permissions.easy i searched for permissions.easy in yast, and found /usr/share/permissions/permissions.easy from package "permissions-config" package "permissions" does not contain any files. i have installed the following packages with "permission" in their name: * permissions * permissions-config * permissions-doc only package "permissions-config" has one file in /etc, it is /etc/permissions.local all the other files are in /usr/share. these are: /usr/share/fillup-templates/sysconfig.security /usr/share/permissions /usr/share/permissions/permissions /usr/share/permissions/permissions.easy /usr/share/permissions/permissions.paranoid /usr/share/permissions/permissions.secure > > /etc/permissions.easy is part of permissions package, and it contains line: on my system permissions package has no file at all. it is version 20200506.1550-14.1 > /bin/su root:root > 4755 > > Please try "rpm -V permissions". this gives zero output.