From c00e6efae574575f79aeeb905643c88ff73f6d07 Mon Sep 17 00:00:00 2001
From: Nick Vyzas <nick@sysown.com>
Date: Wed, 29 Aug 2018 18:20:07 +0300
Subject: [PATCH] Set 600 as default perms for proxysql.cnf

---
 docker/images/proxysql/deb-compliant/ctl/proxysql.ctl            | 1 +
 .../rhel-compliant/rpmmacros/rpmbuild/SPECS/proxysql.spec        | 1 +
 2 files changed, 2 insertions(+)

diff --git a/docker/images/proxysql/deb-compliant/ctl/proxysql.ctl b/docker/images/proxysql/deb-compliant/ctl/proxysql.ctl
index e04fbf2b3..6e8f05981 100644
--- a/docker/images/proxysql/deb-compliant/ctl/proxysql.ctl
+++ b/docker/images/proxysql/deb-compliant/ctl/proxysql.ctl
@@ -22,3 +22,4 @@ File: postinst
  #!/bin/sh -e
  if [ ! -d /var/lib/proxysql ]; then mkdir /var/lib/proxysql ; fi
  update-rc.d proxysql defaults
+ chmod 600 /etc/proxysql.cnf
diff --git a/docker/images/proxysql/rhel-compliant/rpmmacros/rpmbuild/SPECS/proxysql.spec b/docker/images/proxysql/rhel-compliant/rpmmacros/rpmbuild/SPECS/proxysql.spec
index 16ff2cff5..832241013 100644
--- a/docker/images/proxysql/rhel-compliant/rpmmacros/rpmbuild/SPECS/proxysql.spec
+++ b/docker/images/proxysql/rhel-compliant/rpmmacros/rpmbuild/SPECS/proxysql.spec
@@ -49,6 +49,7 @@ rm -rf /var/run/%{name}
 %files
 %defattr(-,root,root,-)
 %config(noreplace) %{_sysconfdir}/%{name}.cnf
+%attr(600,root,root) %{_sysconfdir}/%{name}.cnf
 %{_bindir}/*
 %{_sysconfdir}/init.d/%{name}
 /usr/share/proxysql/tools/proxysql_galera_checker.sh