diff --git a/bin/sosetup b/bin/sosetup
index a514a32..144124b 100755
--- a/bin/sosetup
+++ b/bin/sosetup
@@ -31,7 +31,7 @@ IP=`ifconfig |grep "inet addr" | awk '{print $2}' |cut -d\: -f2 |grep -v "127.0.
 TITLE="Security Onion Setup ($HOSTNAME)"
 # File locations
 CONF="/etc/nsm/securityonion.conf"
-LOG="/tmp/sosetup.log"
+LOG=`mktemp /tmp/sosetup.log.XXXXXXXXXX`
 PP_CONF="/etc/nsm/pulledpork/pulledpork.conf"
 # URLs
 ET_URL="rules.emergingthreats.net"
diff --git a/debian/changelog b/debian/changelog
index 5b08c65..ee09235 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+securityonion-setup (20120912-0ubuntu0securityonion154) precise; urgency=low
+
+  * replace /tmp/sosetup.log with mktemp 
+
+ -- Doug Burks <doug.burks@gmail.com>  Fri, 10 Jul 2015 08:10:34 -0400
+
 securityonion-setup (20120912-0ubuntu0securityonion153) precise; urgency=low
 
   * Issue 605: sosetup: replace tmp with mktemp 
diff --git a/debian/patches/replace-tmpsosetup.log-with-mktemp b/debian/patches/replace-tmpsosetup.log-with-mktemp
new file mode 100644
index 0000000..31703d2
--- /dev/null
+++ b/debian/patches/replace-tmpsosetup.log-with-mktemp
@@ -0,0 +1,36 @@
+Description: <short summary of the patch>
+ TODO: Put a short summary on the line above and replace this paragraph
+ with a longer explanation of this change. Complete the meta-information
+ with other relevant fields (see below for details). To make it easier, the
+ information below has been extracted from the changelog. Adjust it or drop
+ it.
+ .
+ securityonion-setup (20120912-0ubuntu0securityonion154) precise; urgency=low
+ .
+   * replace /tmp/sosetup.log with mktemp
+Author: Doug Burks <doug.burks@gmail.com>
+
+---
+The information above should follow the Patch Tagging Guidelines, please
+checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here
+are templates for supplementary fields that you might want to add:
+
+Origin: <vendor|upstream|other>, <url of original patch>
+Bug: <url in upstream bugtracker>
+Bug-Debian: http://bugs.debian.org/<bugnumber>
+Bug-Ubuntu: https://launchpad.net/bugs/<bugnumber>
+Forwarded: <no|not-needed|url proving that it has been forwarded>
+Reviewed-By: <name and email of someone who approved the patch>
+Last-Update: <YYYY-MM-DD>
+
+--- securityonion-setup-20120912.orig/bin/sosetup
++++ securityonion-setup-20120912/bin/sosetup
+@@ -31,7 +31,7 @@ IP=`ifconfig |grep "inet addr" | awk '{p
+ TITLE="Security Onion Setup ($HOSTNAME)"
+ # File locations
+ CONF="/etc/nsm/securityonion.conf"
+-LOG="/tmp/sosetup.log"
++LOG=`mktemp /tmp/sosetup.log.XXXXXXXXXX`
+ PP_CONF="/etc/nsm/pulledpork/pulledpork.conf"
+ # URLs
+ ET_URL="rules.emergingthreats.net"
diff --git a/debian/patches/series b/debian/patches/series
index 148bb3f..b37edc2 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -152,3 +152,4 @@ Issue-596:-sosetup:-sensor-should-stopdisable-Apache-and-Snorby-worker
 pkill-autossh-before-using-mysql-and-also-replace-sosetupscp-with-mktemp
 replace-tmpsecurityonion.conf-with-$SECURITYONION_CONF_MASTER-using-mktemp
 Issue-605:-sosetup:-replace-tmp-with-mktemp
+replace-tmpsosetup.log-with-mktemp