apmd seems to execute suspend/resume scripts with a wrong umask. For example, upon resume the /etc/sysconfig/apm-scripts/apmscript will start the netfs service and create the lock file world readable: [root@soliton init.d]# ls -l /var/lock/subsys/netfs -rw-rw-rw- 1 root root 0 Jan 2 11:20 netfs I haven't found any other effects yet, but this might have some security implications and should be fixed!
Fixed.