You may be able to get Puppet to do this for you. http://reductivelabs.com/trac/puppet/wiki/Recipes/FilePermissionCheck - Ken