How does Red Hat check the default file permissions in RHEL?

Issue

Does Red Hat check the permissions used in the distributions, or does Red Hat simply trust the builder of the RPM/source code to get it correct?

For example lets say someone changed the source for tcpdump so when the rpm is built the resultant program has SUID set; would that get flagged in your internal checks before being released to the public?