> I just realized that because of the %attr entries in the RPM, the chroot is > probably irrelevant for them, so the ss problem goes away (except if you want > to make .tgz files). So with this approach the binary RPM is ok (i.e. everything is owned by root), but if someone unpacks the source rpm, it is all owned by sweeks (or whoever made it). That seems bad.