lockdown web directory permissions and create registry directory

diff --git a/netdata.spec.in b/netdata.spec.in
index 1dddbe19ee20af24ef79956cfb020061fcc06fe3..d48bea2a3c6a9d46d877ee1688768606438691c5 100644 (file)
--- a/netdata.spec.in
+++ b/netdata.spec.in
@@ -142,9 +142,10 @@ rm -rf $RPM_BUILD_ROOT
 %attr(0700,netdata,netdata) %dir %{_localstatedir}/cache/%{name}
 %attr(0700,netdata,netdata) %dir %{_localstatedir}/log/%{name}
 %attr(0700,netdata,netdata) %dir %{_localstatedir}/lib/%{name}
+%attr(0700,netdata,netdata) %dir %{_localstatedir}/lib/%{name}/registry
 
 %dir %{_datadir}/%{name}
-%attr(-,root,netdata) %{_datadir}/%{name}/web
+%attr(0644,root,netdata,0755) %{_datadir}/%{name}/web
 
 %if %{with systemd}
 %{_unitdir}/netdata.service