From 8cbad7a792230d2d2a0760539611936bbd6142f3 Mon Sep 17 00:00:00 2001
From: Jason Barnett <dev.Barnett.Jason@dev.bwater.com>
Date: Thu, 28 Jul 2016 09:45:36 -0400
Subject: [PATCH 1/1] lock down and fix %files section

---
 netdata.spec.in | 20 +++++++++++---------
 1 file changed, 11 insertions(+), 9 deletions(-)

diff --git a/netdata.spec.in b/netdata.spec.in
index 884aa3fc..1dddbe19 100644
--- a/netdata.spec.in
+++ b/netdata.spec.in
@@ -129,16 +129,22 @@ fi
 rm -rf $RPM_BUILD_ROOT
 
 %files
-%attr(-,netdata,netdata) %dir %{_localstatedir}/cache/%{name}
-%attr(-,netdata,netdata) %dir %{_localstatedir}/log/%{name}
+%defattr(-,root,root)
+
+%dir %{_sysconfdir}/%{name}
 %config(noreplace) %{_sysconfdir}/%{name}/*.conf
 %config(noreplace) %{_sysconfdir}/%{name}/python.d/*.conf
-%dir %{_sysconfdir}/%{name}
-%{_sysconfdir}/logrotate.d/%{name}
+%config(noreplace) %{_sysconfdir}/logrotate.d/%{name}
+
 %{_libexecdir}/%{name}
 %{_sbindir}/%{name}
+
+%attr(0700,netdata,netdata) %dir %{_localstatedir}/cache/%{name}
+%attr(0700,netdata,netdata) %dir %{_localstatedir}/log/%{name}
+%attr(0700,netdata,netdata) %dir %{_localstatedir}/lib/%{name}
+
 %dir %{_datadir}/%{name}
-%dir %{_sharedstatedir}/%{name}
+%attr(-,root,netdata) %{_datadir}/%{name}/web
 
 %if %{with systemd}
 %{_unitdir}/netdata.service
@@ -146,10 +152,6 @@ rm -rf $RPM_BUILD_ROOT
 %{_sysconfdir}/rc.d/init.d/netdata
 %endif
 
-# override defattr for web files
-%defattr(644,root,netdata,755)
-%{_datadir}/%{name}/web
-
 %changelog
 * Tue Jul 26 2016 Jason Barnett <J@sonBarnett.com> - 1.2.0-2
 - Added support for EL6
-- 
2.39.2