Sophos

Fix for the changed behavior of sophos. savscan.base need the SGID bit to be set. Before the change in sophos new security checks was it possible to only have the exec bit. We still have the engine in a SELinux sandbox