=== modified file 'TODO'
--- TODO	2016-03-17 20:40:55 +0000
+++ TODO	2016-03-19 03:48:56 +0000
@@ -39,7 +39,7 @@
 * mandos (server)
 ** TODO [#B] --notify-command
    This would allow the mandos.service to use
-   --notify-command="systemd-notify --pid READY=1"
+   --notify-command="systemd-notify --pid --ready"
 ** TODO [#B] Log level							  :BUGS:
 *** TODO /etc/mandos/clients.d/*.conf
     Watch this directory and add/remove/update clients?

=== modified file 'debian/mandos.postinst'
--- debian/mandos.postinst	2016-03-07 23:39:36 +0000
+++ debian/mandos.postinst	2016-03-19 03:48:56 +0000
@@ -48,7 +48,11 @@
 		invoke-rc.d mandos start
 	    fi
 	fi
-	chown _mandos:_mandos /var/lib/mandos
+	if ! dpkg-statoverride --list "/var/lib/mandos" >/dev/null \
+	     2>&1; then
+	    chown _mandos:_mandos /var/lib/mandos
+	    chmod u=rwx,go= /var/lib/mandos
+	fi
 	;;
     
     abort-upgrade|abort-deconfigure|abort-remove)