diff -urp audit-2.6.5.orig/src/auditd-event.c audit-2.6.5/src/auditd-event.c --- audit-2.6.5.orig/src/auditd-event.c 2016-07-13 12:14:36.000000000 -0400 +++ audit-2.6.5/src/auditd-event.c 2016-07-22 10:37:45.468455518 -0400 @@ -900,7 +900,7 @@ static void fix_disk_permissions(void) // Start with the directory strcpy(path, config->log_file); dir = dirname(path); - chmod(dir, config->log_group ? S_IRWXU|S_IRWXG : S_IRWXU); + chmod(dir, config->log_group ? S_IRWXU|S_IRGRP|S_IXGRP : S_IRWXU); chown(dir, 0, config->log_group ? config->log_group : 0); // Now, for each file...