From 9e21a089d29e7952a5fe0f2f9426c3fdfd76a20f Mon Sep 17 00:00:00 2001
From: Denis Doria <denisdoria@gmail.com>
Date: Sun, 16 Aug 2015 18:43:27 +0200
Subject: [PATCH] Fixing permission issues for new installations

The umask as 0027 will generates permissions like:
0640 - for files
0750 - for directories

This should solve the grafana.db being accesable by any user for new installations.
---
 packaging/deb/init.d/grafana-server          | 2 ++
 packaging/deb/systemd/grafana-server.service | 1 +
 2 files changed, 3 insertions(+)

diff --git a/packaging/deb/init.d/grafana-server b/packaging/deb/init.d/grafana-server
index a4f6423a68d..9de4bf42092 100755
--- a/packaging/deb/init.d/grafana-server
+++ b/packaging/deb/init.d/grafana-server
@@ -36,6 +36,8 @@ MAX_OPEN_FILES=10000
 PID_FILE=/var/run/$NAME.pid
 DAEMON=/usr/sbin/$NAME
 
+umask 0027
+
 if [ `id -u` -ne 0 ]; then
 	echo "You need root privileges to run this script"
 	exit 4
diff --git a/packaging/deb/systemd/grafana-server.service b/packaging/deb/systemd/grafana-server.service
index e1d024750d2..16b975f23ea 100644
--- a/packaging/deb/systemd/grafana-server.service
+++ b/packaging/deb/systemd/grafana-server.service
@@ -17,6 +17,7 @@ ExecStart=/usr/sbin/grafana-server                                \
                             cfg:default.paths.data=${DATA_DIR}    \
 LimitNOFILE=10000
 TimeoutStopSec=20
+UMask=0027
 
 [Install]
 WantedBy=multi-user.target