4 files in pam_usb's docs (FE5 and devel) are world writable. See bug 200794 for background and more info.