case "$ACTION" in
post)
setcap cap_syslog+ep /usr/bin/nanoklogd
chown -R root:socklog /var/log/socklog
chmod 2750 /var/log/socklog/*
;;
esac