--- systemd-197/tmpfiles.d/legacy.conf.orig	2013-01-10 13:09:57.433396711 +0100
+++ systemd-197/tmpfiles.d/legacy.conf	2013-01-10 13:11:41.851006493 +0100
@@ -10,12 +10,12 @@
 # These files are considered legacy and are unnecessary on legacy-free
 # systems.
 
-d /run/lock 0755 root root -
+d /run/lock 1771 root root -
 
 # /run/lock/subsys is used for serializing SysV service execution, and
 # hence without use on SysV-less systems.
 
-d /run/lock/subsys 0755 root root -
+d /run/lock/subsys 0700 root root -
 
 # /run/lock/lockdev is used to serialize access to tty devices via
 # LCK..xxx style lock files, For more information see:
@@ -23,7 +23,7 @@
 # On modern systems a BSD file lock is a better choice if
 # serialization is needed on those devices.
 
-d /run/lock/lockdev 0775 root lock -
+# d /run/lock/lockdev 0775 root lock -
 
 # /forcefsck, /fastboot and /forcequotecheck are deprecated in favor of the
 # kernel command line options 'fsck.mode=force', 'fsck.mode=skip' and