diff -r 2539f7ef5388 src/config/active-response.c
--- a/src/config/active-response.c	Wed Jan 16 14:44:16 2013 -0800
+++ b/src/config/active-response.c	Thu Jan 24 10:31:48 2013 -0500
@@ -12,6 +12,8 @@
 
 
 #include "shared.h"
+#include <sys/types.h>
+#include <grp.h>
 #include "os_xml/os_xml.h"
 #include "os_regex/os_regex.h"
 
@@ -55,7 +57,25 @@
         merror(FOPEN_ERROR, ARGV0, DEFAULTARPATH);
         return(-1);
     }
-    chmod(DEFAULTARPATH, 0440);
+
+    struct group *os_group;
+    if((os_group = getgrnam("ossec")) == NULL)
+    {
+      merror("Could not get ossec gid.");
+      return(-1);
+    }
+
+    if((chown(DEFAULTARPATH, -1, os_group->gr_gid)) == -1)
+    {
+      merror("Could not change the group to ossec: %d", errno);
+      return(-1);
+    }
+
+    if((chmod(DEFAULTARPATH, 0440)) == -1)
+    {
+      merror("Could not chmod to 0440: %d", errno);
+      return(-1);
+    }
 
 
     /* Allocating for the active-response */