> Fix permissions after extraction (but, as you pointed out, there is the > security issue with the window of group- and world-writable before the > fix-up)? You could make the work directory temporaribly non-{group,world}-searchable.