Is dpkg-statoverride meant to be used in a package, or only by sysadmins? I've got a package which currently asks whether the svgalib binary should be installed suid root. The safest way to do this, of course, would be to ship it 755, and then add the suid bit later. However, on installation, if the user says that the binary should be suid, should the postinst scripts call dpkg-statoverride? Or just set the suid bit?