0.17

7 files changed, 126 insertions, 128 deletions

diff --git a/conf/perm.0 b/conf/perm.0
index 1cc7203..92adab5 100644
--- a/conf/perm.0
+++ b/conf/perm.0
@@ -1,10 +1,9 @@
-# Welcome in Level 1
+# Welcome in Level 0
 ###
+/						root.root		755
 /bin/						root.root		755
 /boot/						root.root		755
 /dev/						root.root		755
-/dev/audio*					root.audio		660
-/dev/dsp*					root.audio		660
 /etc/						root.root		755
 /etc/conf.modules				root.root		644
 /etc/cron.daily/				root.root		755
@@ -14,7 +13,6 @@
 /etc/crontab					root.root		644
 /etc/dhcpcd/					root.root		755
 /etc/dhcpcd/*      				root.root		644
-/etc/esd.conf					root.root		644
 /etc/ftpaccess					root.root		644
 /etc/ftpconversions				root.root		644
 /etc/ftpgroups					root.root		644
@@ -26,28 +24,31 @@
 /etc/hosts.equiv				root.root		644
 /etc/inetd.conf					root.root		644
 /etc/init.d/					root.root		755
-/etc/rc.d/init.d/syslog				root.root		744
 /etc/inittab					root.root		644
 /etc/ld.so.conf					root.root		644
 /etc/lilo.conf					root.root		644
+/etc/mandrake-release				root.root		644
 /etc/modules.conf				root.root		644
 /etc/motd					root.root		644
 /etc/printcap					root.root		644
 /etc/profile.d/*				root.root		755
 /etc/rc.d/					root.root		755
+/etc/rc.d/init.d/syslog				root.root		744
 /etc/securetty					root.root		644
 /etc/sendmail.cf				root.root		644
 /etc/shutdown.allow				root.root		644
-/etc/ssh_config					root.root		644
-/etc/ssh_host_key				root.root		644
-/etc/ssh_host_key.pub				root.root		644
-/etc/sshd_config				root.root		644
+/etc/ssh/ssh_config				root.root		644
+/etc/ssh/ssh_host_*key				root.root		600
+/etc/ssh/ssh_host_*key.pub			root.root		644
+/etc/ssh/sshd_config				root.root		644
+/etc/sysconfig					root.root		755
 /etc/syslog.conf				root.root		644
 /etc/updatedb.conf				root.root		644
 /home/						root.root		755
 /home/*						current			755
 /lib/						root.root		755
 /mnt/						root.root		755
+/proc						root.root		555
 /root/						root.root		755
 /sbin/						root.root		755
 /tmp/						root.root		1777
@@ -55,18 +56,17 @@
 /usr/*						root.root		755
 /usr/X11R6/					root.root		755
 /usr/bin/					root.root		755
-/usr/sbin/					root.root		755
 /usr/lib/rpm/rpm?				rpm.rpm			755
+/usr/sbin/					root.root		755
 /usr/share/doc					root.root		755
+/usr/share/man					root.root		755
+/usr/tmp					root.root		1777
 /var/						root.root		755
-/var/tmp					root.root		1777
+/var/lock/subsys				root.root		755
 /var/log/					root.root		755
 /var/log/*					root.adm		644
-/var/log/squidGuard				squid.squid		755
-/var/log/squid					squid.squid		755
-/var/log/snort					snort.snort		755
-/var/log/uucp					uucp.uucp		755
-/var/log/news					news.news		755
-/var/log/security/				root.root		700
-/var/log/security/*				root.root		600
+/var/log/*/*					current			644
+/var/log/*/*/*					current			644
+/var/log/*/.					current			755
 /var/spool/mail/				root.mail		771
+/var/tmp					root.root		1777
diff --git a/conf/perm.1 b/conf/perm.1
index a0ade08..52a9067 100644
--- a/conf/perm.1
+++ b/conf/perm.1
@@ -1,10 +1,9 @@
 # Welcome in Level 1
 ###
+/						root.root		755
 /bin/						root.root		755
 /boot/						root.root		755
 /dev/						root.root		755
-/dev/audio*					root.audio		660
-/dev/dsp*					root.audio		660
 /etc/						root.root		755
 /etc/conf.modules				root.root		644
 /etc/cron.daily/				root.root		755
@@ -14,7 +13,6 @@
 /etc/crontab					root.root		644
 /etc/dhcpcd/					root.root		755
 /etc/dhcpcd/*					root.root		644
-/etc/esd.conf					root.root		644
 /etc/ftpaccess					root.root		644
 /etc/ftpconversions				root.root		644
 /etc/ftpgroups					root.root		644
@@ -26,46 +24,48 @@
 /etc/hosts.equiv				root.root		644
 /etc/inetd.conf					root.root		644
 /etc/init.d/					root.root		755
-/etc/rc.d/init.d/syslog				root.root		744
 /etc/inittab					root.root		644
 /etc/ld.so.conf					root.root		644
 /etc/lilo.conf					root.root		644
+/etc/mandrake-release				root.root		644
 /etc/modules.conf				root.root		644
 /etc/motd					root.root		644
 /etc/printcap					root.root		644
 /etc/profile.d/*				root.root		755
 /etc/rc.d/					root.root		755
+/etc/rc.d/init.d/syslog				root.root		744
 /etc/securetty					root.root		644
 /etc/sendmail.cf				root.root		644
 /etc/shutdown.allow				root.root		644
-/etc/ssh_config					root.root		644
-/etc/ssh_host_key				root.root		644
-/etc/ssh_host_key.pub				root.root		644
-/etc/sshd_config				root.root		644
+/etc/ssh/ssh_config				root.root		644
+/etc/ssh/ssh_host_*key				root.root		600
+/etc/ssh/ssh_host_*key.pub			root.root		644
+/etc/ssh/sshd_config				root.root		644
+/etc/sysconfig					root.root		755
 /etc/syslog.conf				root.root		644
 /etc/updatedb.conf				root.root		644
 /home/						root.root		755
 /home/*						current			755
 /lib/						root.root		755
 /mnt/						root.root		755
+/proc						root.root		555
 /root/						root.root		755
 /sbin/						root.root		755
 /tmp/						root.root		1777
 /usr/						root.root		755
 /usr/X11R6/					root.root		755
 /usr/bin/					root.root		755
-/usr/sbin/					root.root		755
 /usr/lib/rpm/rpm?				rpm.rpm			755
+/usr/sbin/					root.root		755
 /usr/share/doc					root.root		755
+/usr/share/man					root.root		755
+/usr/tmp					root.root		2777
 /var/						root.root		755
+/var/lock/subsys				root.root		755
 /var/log/					root.root		755
 /var/log/*					root.adm		644
-/var/log/squidGuard				squid.squid		755
-/var/log/squid					squid.squid		755
-/var/log/snort					snort.snort		755
-/var/log/uucp					uucp.uucp		755
-/var/log/news					news.news		755
-/var/log/security/				root.root		700
-/var/log/security/*				root.root		600
+/var/log/*/*					current			644
+/var/log/*/*/*					current			644
+/var/log/*/.					current			755
 /var/spool/mail/				root.mail		2775
 /var/tmp					root.root		2777
diff --git a/conf/perm.2 b/conf/perm.2
index 82052de..51e183f 100644
--- a/conf/perm.2
+++ b/conf/perm.2
@@ -1,10 +1,9 @@
 # Welcome in Level 2
 ###
+/						root.root		755
 /bin/						root.root		755
 /boot/						root.root		755
 /dev/						root.root		755
-/dev/audio*					root.audio		660
-/dev/dsp*					root.audio		660
 /etc/						root.root		755
 /etc/conf.modules				root.root		644
 /etc/cron.daily/				root.root		755
@@ -14,7 +13,6 @@
 /etc/crontab					root.root		644
 /etc/dhcpcd/					root.root		755
 /etc/dhcpcd/*					root.root		644
-/etc/esd.conf					root.root		644
 /etc/ftpaccess					root.root		644
 /etc/ftpconversions				root.root		644
 /etc/ftpgroups					root.root		644
@@ -26,28 +24,31 @@
 /etc/hosts.equiv				root.root		644
 /etc/inetd.conf					root.root		644
 /etc/init.d/					root.root		755
-/etc/rc.d/init.d/syslog				root.root		744
 /etc/inittab					root.root		644
 /etc/ld.so.conf					root.root		644
 /etc/lilo.conf					root.root		644
+/etc/mandrake-release				root.root		644
 /etc/modules.conf				root.root		644
 /etc/motd					root.root		644
 /etc/printcap					root.root		644
 /etc/profile.d/*				root.root		755
 /etc/rc.d/					root.root		755
+/etc/rc.d/init.d/*				root.root		744
 /etc/securetty					root.root		644
 /etc/sendmail.cf				root.root		644
 /etc/shutdown.allow				root.root		644
-/etc/ssh_config					root.root		644
-/etc/ssh_host_key				root.root		644
-/etc/ssh_host_key.pub				root.root		644
-/etc/sshd_config				root.root		644
+/etc/ssh/ssh_config				root.root		644
+/etc/ssh/ssh_host_*key				root.root		600
+/etc/ssh/ssh_host_*key.pub			root.root		644
+/etc/ssh/sshd_config				root.root		644
+/etc/sysconfig					root.root		755
 /etc/syslog.conf				root.root		644
 /etc/updatedb.conf				root.root		644
 /home/						root.root		755
 /home/*						current			755
 /lib/						root.root		755
 /mnt/						root.root		755
+/proc						root.root		555
 /root/						root.root		700
 /sbin/						root.root		755
 /tmp/						root.root		1777
@@ -55,18 +56,17 @@
 /usr/*						root.root		755
 /usr/X11R6/					root.root		755
 /usr/bin/					root.root		755
-/usr/sbin/					root.root		755
 /usr/lib/rpm/rpm?				rpm.rpm			755
+/usr/sbin/					root.root		755
 /usr/share/doc					root.root		755
+/usr/share/man					root.root		755
+/usr/tmp					root.root		1777
 /var/						root.root		755
+/var/lock/subsys				root.root		755
 /var/log/					root.root		755
 /var/log/*					root.adm		640
-/var/log/squidGuard				squid.squid		755
-/var/log/squid					squid.squid		755
-/var/log/snort					snort.snort		755
-/var/log/uucp					uucp.uucp		755
-/var/log/news					news.news		755
-/var/log/security/				root.root		700
-/var/log/security/*				root.root		600
+/var/log/*/*					current			640
+/var/log/*/*/*					current			640
+/var/log/*/.					current			755
 /var/spool/mail/				root.mail		2775
 /var/tmp					root.root		1777
diff --git a/conf/perm.3 b/conf/perm.3
index 1d78f10..798adb5 100644
--- a/conf/perm.3
+++ b/conf/perm.3
@@ -1,10 +1,9 @@
 # Welcome in Level 3
 ###
+/						root.adm		755
 /bin/						root.root		755
 /boot/						root.root		755
 /dev/						root.root		755
-/dev/audio*					root.audio		660
-/dev/dsp*					root.audio		660
 /etc/						root.root		755
 /etc/conf.modules				root.root		644
 /etc/cron.daily/				root.root		755
@@ -14,7 +13,6 @@
 /etc/crontab					root.root		644
 /etc/dhcpcd/					root.root		755
 /etc/dhcpcd/*					root.root		644
-/etc/esd.conf					root.root		644
 /etc/ftpaccess					root.root		644
 /etc/ftpconversions				root.root		644
 /etc/ftpgroups					root.root		644
@@ -26,28 +24,31 @@
 /etc/hosts.equiv				root.root		644
 /etc/inetd.conf					root.root		644
 /etc/init.d/					root.root		755
-/etc/rc.d/init.d/syslog				root.root		700
 /etc/inittab					root.root		644
 /etc/ld.so.conf					root.root		644
 /etc/lilo.conf					root.root		644
+/etc/mandrake-release				root.root		644
 /etc/modules.conf				root.root		644
 /etc/motd					root.root		644
 /etc/printcap					root.root		644
 /etc/profile.d/*				root.root		755
 /etc/rc.d/					root.root		755
+/etc/rc.d/init.d/*				root.root		700
 /etc/securetty					root.root		644
 /etc/sendmail.cf				root.root		644
 /etc/shutdown.allow				root.root		644
-/etc/ssh_config					root.root		644
-/etc/ssh_host_key				root.root		644
-/etc/ssh_host_key.pub				root.root		644
-/etc/sshd_config				root.root		644
+/etc/ssh/ssh_config				root.root		644
+/etc/ssh/ssh_host_*key				root.root		600
+/etc/ssh/ssh_host_*key.pub			root.root		644
+/etc/ssh/sshd_config				root.root		644
+/etc/sysconfig					root.root		755
 /etc/syslog.conf				root.adm		640
 /etc/updatedb.conf				root.root		644
 /home/						root.root		755
 /home/*						current			700
 /lib/						root.root		755
 /mnt/						root.root		755
+/proc						root.root		555
 /root/						root.root		700
 /sbin/						root.root		755
 /tmp/						root.root		1777
@@ -55,18 +56,17 @@
 /usr/*						root.root		755
 /usr/X11R6/					root.root		755
 /usr/bin/					root.root		755
-/usr/sbin/					root.root		755
 /usr/lib/rpm/rpm?				rpm.rpm			755
+/usr/sbin/					root.root		755
 /usr/share/doc					root.root		755
+/usr/share/man					root.root		755
+/usr/tmp					root.root		1777
 /var/						root.root		755
+/var/lock/subsys				root.root		755
 /var/log/					root.root		755
-/var/log/*					root.root		600
-/var/log/squidGuard				squid.squid		755
-/var/log/squid					squid.squid		755
-/var/log/snort					snort.snort		755
-/var/log/uucp					uucp.uucp		755
-/var/log/news					news.news		755
-/var/log/security/				root.root		700
-/var/log/security/*				root.root		600
+/var/log/*					root.root		640
+/var/log/*/*					current			640
+/var/log/*/*/*					current			640
+/var/log/*/.					current			755
 /var/spool/mail/				root.mail		2775
 /var/tmp					root.root		1777
diff --git a/conf/perm.4 b/conf/perm.4
index 45b3fdc..41a00b2 100644
--- a/conf/perm.4
+++ b/conf/perm.4
@@ -1,11 +1,10 @@
 # Welcome in Level 4, aka secure & usable.
 ###
+/						root.adm		751
 /bin/						root.root		711
 /bin/rpm					rpm.rpm			750
 /boot/						root.root		700
 /dev/						root.root		711
-/dev/audio*					root.audio		600
-/dev/dsp*					root.audio		600
 /etc/						root.adm		711
 /etc/conf.modules				root.adm		640
 /etc/cron.daily/				root.adm		750
@@ -15,7 +14,6 @@
 /etc/crontab					root.adm		640
 /etc/dhcpcd/					root.adm		750
 /etc/dhcpcd/*					root.adm		640
-/etc/esd.conf					root.audio		640
 /etc/ftpaccess					root.adm		640
 /etc/ftpconversions				root.adm		640
 /etc/ftpgroups					root.adm		640
@@ -26,29 +24,32 @@
 /etc/hosts.deny					root.adm		640
 /etc/hosts.equiv				root.adm		640
 /etc/inetd.conf					root.adm		640
-/etc/rc.d/init.d/				root.adm		750
-/etc/rc.d/init.d/syslog				root.adm		740
 /etc/inittab					root.adm		640
 /etc/ld.so.conf					root.adm		640
 /etc/lilo.conf					root.adm		600
+/etc/mandrake-release				root.adm		640
 /etc/modules.conf				root.adm		640
 /etc/motd					root.adm		644
 /etc/printcap					root.lp			640
 /etc/profile.d/*				root.root		755
-/etc/rc.d/					root.adm		640
+/etc/rc.d/					root.adm		750
+/etc/rc.d/init.d/				root.adm		750
+/etc/rc.d/init.d/*				root.adm		740
 /etc/securetty					root.root		640
 /etc/sendmail.cf				root.adm		640
 /etc/shutdown.allow				root.root		600
-/etc/ssh_config					root.root		644
-/etc/ssh_host_key				root.adm		640
-/etc/ssh_host_key.pub				root.adm		644
-/etc/sshd_config				root.adm		640
+/etc/ssh/ssh_config				root.root		644
+/etc/ssh/ssh_host_*key				root.adm		600
+/etc/ssh/ssh_host_*key.pub			root.adm		644
+/etc/ssh/sshd_config				root.adm		640
+/etc/sysconfig					root.adm		751
 /etc/syslog.conf				root.adm		640
 /etc/updatedb.conf				root.adm		640
 /home/						root.adm		751
 /home/*						current			700
 /lib/						root.adm		751
 /mnt/						root.adm		750
+/proc						root.kmem		550
 /root/						root.root		700
 /sbin/						root.adm		751
 /tmp/						root.root		1777
@@ -56,18 +57,17 @@
 /usr/*						root.adm		751
 /usr/X11R6/					root.xgrp		751
 /usr/bin/					root.adm		751
-/usr/sbin/					root.adm		751
 /usr/lib/rpm/rpm?				rpm.rpm			750
+/usr/sbin/					root.adm		751
 /usr/share/doc					rpm.rpm			750
+/usr/share/man					rpm.rpm			750
+/usr/tmp					root.root		1777
 /var/						root.root		755
+/var/lock/subsys				root.root		700
 /var/log/					root.root		711
 /var/log/*					root.root		600
-/var/log/squidGuard				squid.squid		751
-/var/log/squid					squid.squid		751
-/var/log/snort					snort.snort		750
-/var/log/uucp					uucp.uucp		750
-/var/log/news					news.news		750
-/var/log/security/				root.root		700
-/var/log/security/*				root.root		600
+/var/log/*/*					current			600
+/var/log/*/*/*					current			600
+/var/log/*/.					current			700
 /var/spool/mail/				root.mail		771
 /var/tmp					root.root		1777
diff --git a/conf/perm.5 b/conf/perm.5
index 8ba96d7..84797ed 100644
--- a/conf/perm.5
+++ b/conf/perm.5
@@ -1,11 +1,10 @@
 # Welcome in Level 5, aka paranoid.
 ###
+/						root.root		711
 /bin/						root.root		711
 /bin/rpm					rpm.rpm			750
 /boot/						root.root		700
 /dev/						root.root		711
-/dev/audio*					root.audio		600
-/dev/dsp*					root.audio		600
 /etc/						root.root		711
 /etc/conf.modules				root.root		600
 /etc/cron.daily/				root.root		700
@@ -15,7 +14,6 @@
 /etc/crontab					root.root		600
 /etc/dhcpcd/					root.root		700
 /etc/dhcpcd/*					root.root		600
-/etc/esd.conf					root.audio		640
 /etc/ftpaccess					root.root		600
 /etc/ftpconversions				root.root		600
 /etc/ftpgroups					root.root		600
@@ -26,29 +24,32 @@
 /etc/hosts.deny					root.root		600
 /etc/hosts.equiv				root.root		600
 /etc/inetd.conf					root.root		600
-/etc/rc.d/init.d/				root.root		700
-/etc/rc.d/init.d/syslog				root.root		700
 /etc/inittab					root.root		600
 /etc/ld.so.conf					root.root		600
 /etc/lilo.conf					root.root		600
+/etc/mandrake-release				root.root		600
 /etc/modules.conf				root.root		600
 /etc/motd					root.root		644
-/etc/printcap					root.lp		640
+/etc/printcap					root.lp			640
 /etc/profile.d/*				root.root		755
-/etc/rc.d/					root.root		600
+/etc/rc.d/					root.root		700
+/etc/rc.d/init.d/				root.root		700
+/etc/rc.d/init.d/*				root.root		700
 /etc/securetty					root.root		600
 /etc/sendmail.cf				root.root		600
-/etc/shutdown.allow             root.root       600
-/etc/ssh_config					root.root		644
-/etc/ssh_host_key				root.root		600
-/etc/ssh_host_key.pub				root.root		644
-/etc/sshd_config				root.root		600
+/etc/shutdown.allow				root.root		600
+/etc/ssh/ssh_config				root.root		644
+/etc/ssh/ssh_host_*key				root.root		600
+/etc/ssh/ssh_host_*key.pub			root.root		644
+/etc/ssh/sshd_config				root.root		600
+/etc/sysconfig					root.root		711
 /etc/syslog.conf				root.root		600
 /etc/updatedb.conf				root.root		600
 /home/						root.root		711
 /home/*						current			700
 /lib/						root.root		711
 /mnt/						root.root		710
+/proc						root.kmem		550
 /root/						root.root		700
 /sbin/						root.root		711
 /tmp/						root.root		1777
@@ -58,27 +59,26 @@
 /usr/bin/					root.root		711
 /usr/bin/cc					root.ctools		750
 /usr/bin/finger					root.ntools		750
-/usr/bin/gcc					root.ctools		750
-/usr/bin/g++					root.ctools		750
+/usr/bin/g++*					root.ctools		750
+/usr/bin/gcc*					root.ctools		750
 /usr/bin/ping					root.ntools		750
+/usr/bin/ssh					root.ntools		750
 /usr/bin/telnet					root.ntools		750
 /usr/bin/w					root.ntools		750
 /usr/bin/who					root.ntools		750
-/usr/bin/ssh					root.ntools		750
+/usr/lib/rpm/rpm?				rpm.rpm			750
 /usr/sbin/					root.root		711
 /usr/sbin/sendmail				root.root		755
 /usr/sbin/traceroute				root.ntools		750
-/usr/lib/rpm/rpm?				rpm.rpm			750
 /usr/share/doc					rpm.rpm			710
+/usr/share/man					rpm.rpm			710
+/usr/tmp					root.root		1777
 /var/						root.root		755
+/var/lock/subsys				root.root		700
 /var/log/					root.root		711
 /var/log/*					root.root		600
-/var/log/squidGuard				squid.squid		751
-/var/log/squid					squid.squid		751
-/var/log/snort					snort.snort		750
-/var/log/uucp					uucp.uucp		750
-/var/log/news					news.news		750
-/var/log/security/				root.root		700
-/var/log/security/*				root.root		600
+/var/log/*/*					current			600
+/var/log/*/*/*					current			600
+/var/log/*/.					current			700
 /var/spool/mail/				root.mail		771
 /var/tmp					root.root		1777
diff --git a/conf/perm.snf b/conf/perm.snf
index 33bc189..3b12650 100644
--- a/conf/perm.snf
+++ b/conf/perm.snf
@@ -1,11 +1,10 @@
 # Welcome in Level 4, aka secure & usable.
 ###
+/						root.adm		751
 /bin/						root.root		711
 /bin/rpm					rpm.rpm			750
 /boot/						root.root		700
 /dev/						root.root		711
-/dev/audio*					root.audio		600
-/dev/dsp*					root.audio		600
 /etc/						root.adm		711
 /etc/conf.modules				root.adm		640
 /etc/cron.daily/				root.adm		750
@@ -15,7 +14,6 @@
 /etc/crontab					root.adm		640
 /etc/dhcpcd/					root.adm		750
 /etc/dhcpcd/*					root.adm		640
-/etc/esd.conf					root.audio		640
 /etc/ftpaccess					root.adm		640
 /etc/ftpconversions				root.adm		640
 /etc/ftpgroups					root.adm		640
@@ -26,29 +24,31 @@
 /etc/hosts.deny					root.adm		640
 /etc/hosts.equiv				root.adm		640
 /etc/inetd.conf					root.adm		640
-/etc/rc.d/init.d/				root.adm		750
-/etc/rc.d/init.d/syslog				root.adm		740
 /etc/inittab					root.adm		640
 /etc/ld.so.conf					root.adm		640
 /etc/lilo.conf					root.adm		600
+/etc/mandrake-release				root.adm		640
 /etc/modules.conf				root.adm		640
 /etc/motd					root.adm		644
 /etc/printcap					root.lp			640
 /etc/profile.d/*				root.root		755
 /etc/rc.d/					root.adm		640
+/etc/rc.d/init.d/				root.adm		750
+/etc/rc.d/init.d/syslog				root.adm		740
 /etc/securetty					root.root		640
 /etc/sendmail.cf				root.adm		640
 /etc/shutdown.allow				root.root		600
-/etc/ssh_config					root.root		644
-/etc/ssh_host_key				root.adm		640
-/etc/ssh_host_key.pub				root.adm		644
-/etc/sshd_config				root.adm		640
+/etc/ssh/ssh_config				root.root		644
+/etc/ssh/ssh_host_*key				root.adm		600
+/etc/ssh/ssh_host_*key.pub			root.adm		644
+/etc/ssh/sshd_config				root.adm		640
 /etc/syslog.conf				root.adm		640
 /etc/updatedb.conf				root.adm		640
 /home/						root.adm		751
 /home/*						current			700
 /lib/						root.adm		751
 /mnt/						root.adm		750
+/proc						root.kmem		550
 /root/						root.root		700
 /sbin/						root.adm		751
 /tmp/						root.root		1777
@@ -56,22 +56,20 @@
 /usr/*						root.adm		751
 /usr/X11R6/					root.xgrp		751
 /usr/bin/					root.adm		751
-/usr/sbin/					root.adm		751
 /usr/lib/rpm/rpm?				rpm.rpm			750
+/usr/sbin/					root.adm		751
 /usr/share/doc					rpm.rpm			750
+/usr/share/man					rpm.rpm			750
+/usr/tmp					root.root		1777
 /var/						root.root		755
+/var/lib/monitoring				root.root 		751
+/var/lib/naat  					root.admin 		2770
+/var/lock/subsys				root.root		700
 /var/log/					root.root		711
 /var/log/*					root.root		600
-/var/log/squidGuard				squid.squid		751
-/var/log/squid					squid.squid		751
-/var/log/uucp					uucp.uucp		750
-/var/log/news					news.news		750
-/var/log/security/				root.root		700
-/var/log/security/*				root.root		600
+/var/log/*/*					current			600
+/var/log/*/*/*					current			600
+/var/log/*/.					current			700
 /var/spool/mail/				root.mail		771
 /var/tmp					root.root		1777
-/var/lib/monitoring				root.root 		751
-/var/lib/naat  					root.admin 		2770
-/var/log/httpd-naat  				httpd-naat.admin 	750
 /var/www-naat  					httpd-naat.admin 	750
-/var/log/snort  				snort.snort 		750