[CHG] must be run as root