* Make /etc/arno-iptables-firewall root:adm o-rx


