fix permissions on /var