This was a clean install of a TW snapshot. Sorry, I do not remember the release date, and it has been updated with "zypper dup" many times. finger@Larrylap:~> sudo fgrep bin/crontab /etc/permissions* grep: /etc/permissions.d: Is a directory /etc/permissions.easy:/usr/bin/crontab root:trusted 4755 /etc/permissions.paranoid:/usr/bin/crontab root:trusted 0755 /etc/permissions.secure:/usr/bin/crontab root:trusted 4750 sudo fgrep bin/crontab /etc/permissions.d/* produces no output. I removed system-user-group accepting the conflict with package filesystem, moved /etc/group to /etc/group.save, and reinstalled system-user-group. finger@Larrylap:~/rtlwifi_new> sudo zypper in system-user-root Loading repository data... Reading installed packages... Resolving package dependencies... The following NEW package is going to be installed: system-user-root 1 new package to install. Overall download size: 8.0 KiB. Already cached: 0 B. After the operation, additional 186.0 B will be used. Continue? [y/n/...? shows all options] (y): Retrieving package system-user-root-20170617-1.8.noarch (1/1), 8.0 KiB ( 186 B unpacked) Retrieving: system-user-root-20170617-1.8.noarch.rpm Checking for file conflicts: (1/1) Installing: system-user-root-20170617-1.8.noarch The resulting /etc/group had only 4 entries: root:x:0: shadow:x:15: trusted:x:42: users:x:100: That did not seem correct, thus I copied the entry for trusted into the saved version, and renamed it back to /etc/group. I then ran chkstat: finger@Larrylap:~> sudo cp /etc/group.save /etc/group finger@Larrylap:~> sudo chkstat --system Checking permissions and ownerships - using the permissions files /etc/permissions /etc/permissions.easy /etc/permissions.d/postfix /etc/permissions.d/texlive /etc/permissions.local setting /var/cache/man/ to man:root 0755. (wrong owner/group man:man) setting /usr/bin/at to root:trusted 4755. (wrong owner/group root:root permissions 4750) setting /usr/bin/crontab to root:trusted 4755. (wrong owner/group root:root permissions 4750) setting /usr/bin/fusermount to root:trusted 4755. (wrong owner/group root:root permissions 4750) setting /sbin/pccardctl to root:trusted 4755. (wrong owner/group root:root permissions 4750) Now crontab has the correct permissions and group. I looks as if this is a one-of-a-kind failure. I have a couple of TW virtual machines that I use for testing the VirtualBox guest modules. Both of them have the correct permissions for crontab. I think we can change this bug to RESOLVED/INVALID.