--- at-3.1.10/at.c.perm	2006-11-14 12:26:27.000000000 +0100

+++ at-3.1.10/at.c	2006-11-14 12:28:15.000000000 +0100

@@ -144,17 +144,12 @@

  */

     if (fcreated) {

 	/*

-        PRIV_START

-

         We need the unprivileged uid here since the file is owned by the real

         (not effective) uid.

         */

         setregid(real_gid, effective_gid);

 	    unlink(atfile);

         setregid(effective_gid, real_gid);

-        /*

-	PRIV_END

-        */

     }

     exit(EXIT_FAILURE);

 }

@@ -314,18 +309,18 @@

 	 * bit.  Yes, this is a kluge.

 	 */

 	cmask = umask(S_IRUSR | S_IWUSR | S_IXUSR);

-        seteuid(real_uid);

+        seteuid(effective_uid);

 	if ((fd = open(atfile, O_CREAT | O_EXCL | O_TRUNC | O_WRONLY, S_IRUSR)) == -1)

 	    perr("Cannot create atjob file %.500s", atfile);

-        seteuid(effective_uid);

+        //seteuid(effective_uid);

 	if ((fd2 = dup(fd)) < 0)

 	    perr("Error in dup() of job file");

-        /*

+        

 	if (fchown(fd2, real_uid, real_gid) != 0)

 	    perr("Cannot give away file");

-        */

+        

     PRIV_END

@@ -656,6 +651,7 @@

                     We need the unprivileged uid here since the file is owned by the real

                     (not effective) uid.

                     */

+//			PRIV_START

                     setregid(real_gid, effective_gid);

 		    if (queue == '=') {

@@ -668,17 +664,17 @@

                     setregid(effective_gid, real_gid);

 		    done = 1;

-

+//			PRIV_END

 		    break;

 		case CAT:

 		    {

 			FILE *fp;

 			int ch;

-

+	//		PRIV_START

 			setregid(real_gid, effective_gid);

 			fp = fopen(dirent->d_name, "r");

-

+	//		PRIV_END

 			if (fp) {

 			    while ((ch = getc(fp)) != EOF) {

 				putchar(ch);

--- at-3.1.10/Makefile.in.perm	2006-11-14 12:26:27.000000000 +0100

+++ at-3.1.10/Makefile.in	2006-11-14 12:26:27.000000000 +0100

@@ -97,7 +97,7 @@

 	$(INSTALL) -m 755 -d $(IROOT)$(atdocdir)

 	$(INSTALL) -m 755 -d $(IROOT)$(ATJOB_DIR)

 	$(INSTALL) -m 755 -d $(IROOT)$(etcdir)/pam.d 

-	$(INSTALL) -g $(DAEMON_GROUPNAME) -o $(DAEMON_USERNAME) -m 755 -d $(IROOT) $(ATSPOOL_DIR)

+	$(INSTALL) -g $(DAEMON_GROUPNAME) -o $(DAEMON_USERNAME) -m 755 -d $(IROOT)$(ATSPOOL_DIR)

 	chmod 700 $(IROOT)$(ATSPOOL_DIR) $(IROOT)$(ATJOB_DIR)

 	touch $(IROOT)$(LFILE)

 	chmod 600 $(IROOT)$(LFILE)