Packages might ship tarballs. They might have different permissions depending on the umask.

= Detection =

[[attachment:binutils_2.25-6.debbindiff.html|Example debbindiff output]]

= Solution =

Add `--mode=go=rX,u+rw,a-s` to `tar` command line.