This bug also exists in Red Hat 7.3 (bug #65081) and needs to be fixed there as
The mgetty-sendfax lockfile directory is world-writable and not sticky.
[root@localhost outgoing]# ls -ld /var/spool/fax/outgoing/locks/
drwxrwxrwx 2 root root 4096 May 26 23:05
At a minimum, this should be chmod 1777
still true with beta3
*** Bug 70770 has been marked as a duplicate of this bug. ***
mgetty-1.1.28-8 should fix this