PreWS audit setup instructions say to create a directory with the permissions
"rws-wsrwx".
This is insecure and allows arbitrary users to ls the files in the directory
and to remove
anyone's files.  More secure perms are "rwx-wx-wt", set using "chmod 1733". 
With these
permissions, a user can create, modify, or delete only their own files, but
they can't even ls
the files in the directory to see what they are.  This is reasonable given that
GRAM2 creates the
files for the user in the first place, and the file-names have large random
integers in them. It
would be very difficult for a user to know the names of their files in order to
alter them.

It would also be good if the instructions suggested that the directory owner be
"globus" or
whichever non-root user will be used to process and load the audit records into
the database.