> > What is the best method for setting 'wtmp' and 'lastlog' to 0660 instead of > > 0664? > Modifying /etc/cron.daily/sysklogd, probably. I'm not using sysklogd (using syslog-ng), therefore that file doesn't exist. Maybe I should have clarified in case location differs between Debian versions. I'm using unstable (sid) and found the entry in /etc/logrotate.conf Thanks, -reid