Fix permissions handling (CVE-2010-0825).