fix permissions to match upstream copies