1. Installed =net-analyzer/arpwatch-2.1.15-r3
2. Ran "emerge --config arpwatch" (it did some magic, like adding
the user and group "arpwatch" as well as setting ARPUSER="arpwatch"
in /etc/conf.d/arpwatch)
3. Ran "/etc/init.d/arpwatch start", that failed with the
following syslog message:
--8<--
arpwatch: fopen(/var/lib/arpwatch/eth0.dat): Permission denied
--8<--
Strangely, /var/lib/arpwatch/eth0.dat is root:root + 0600.
Even removing /var/lib/arpwatch/eth0.dat doesn't help -- it get's
recreated with the above mentioned ownership + permissions.
I suspect arpwatch to drop the privileges *after* the file
gets created?