If user does not have yast2-security installed (which I doubt), he does not have the file broken