rpm postinst etc. scripts and permissions: -rw-rw-r-- root fou4s

SuSE 9.0, fou4s 0.11
I noticed after updateing some packages backups of config files
like "-rw-rw-r-- root fou4s", so I guess rpm pre/post install
scripts are executed with umask and gid inherited from fou4s: sg
fou4s, umask 002 this might have security implications.

maybe the actual rpm -Uhv should be done as 
( umask 077; su - -c "rpm -Uhv ..." ) 
or some such.

	Lars Ellenberg
--