pre_upgrade() {
  chmod -R o= /usr/share/lynis
  chmod 0755 /usr/share/lynis
  # fix non-test includes to let lynis run as user but complain gracefully
  chmod o+rx /usr/share/lynis/include
  chmod o+r /usr/share/lynis/include/*
  chmod o-r /usr/share/lynis/include/tests_*
}