create logs directory with new permissions

owner root, group pf, only writable by root, readable by pf

debian/packetfence.postinst

@@ -41,7 +41,8 @@ case "$1" in
         chmod ug+s $PACKETFENCE/bin/pfcmd
 
         chown pf:pf $PACKETFENCE
-        find $PACKETFENCE '(' -type d -or -type f ')' -not -name pfcmd -print0 | xargs -0 chown pf:pf
+        find $PACKETFENCE '(' -type d -or -type f ')' -not -name pfcmd -not -name "logs" -print0 | xargs -0 chown pf:pf
+	chgrp pf $PACKETFENCE/logs
 
         # link to latest SQL schema
         if [ -h "$PACKETFENCE/db/pf-schema.sql" ]; then

debian/rules

@@ -95,7 +95,7 @@ install: build
 	install -d -m0700 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/conf/ssl
 	install -d -m0700 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/conf/ssl/acme-challenge
 	install -d -m0700 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/raddb/sites-enabled
-	install -d -m2770 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/logs
+	install -d -m0750 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/logs
 	install -d -m2770 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/var/conf
 	install -d -m2770 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/var/cache
 	install -d -m2770 $(CURDIR)/debian/packetfence$(PREFIX)/$(NAME)/var/cache/ntlm_cache_users

rpm/packetfence.spec

@@ -440,7 +440,7 @@ done
 %{__install} -d %{buildroot}/usr/local/pf/conf/radiusd
 %{__install} -d %{buildroot}/usr/local/pf/conf/ssl
 %{__install} -d %{buildroot}/usr/local/pf/conf/ssl/acme-challenge
-%{__install} -d -m2775 %{buildroot}%logdir
+%{__install} -d -m0750 %{buildroot}%logdir
 %{__install} -d %{buildroot}/usr/local/pf/raddb/sites-enabled
 %{__install} -d -m2775 %{buildroot}/usr/local/pf/var
 %{__install} -d -m2775 %{buildroot}/usr/local/pf/var/cache
@@ -1213,7 +1213,7 @@ fi
 /usr/local/pf/containers
 %attr(0755, pf, pf)     /usr/local/pf/containers/*.sh
 
-%dir %attr(02755, pf, pf)     /usr/local/pf/logs
+%dir %attr(0750, root, pf)     /usr/local/pf/logs
 %doc                    /usr/local/pf/NEWS.asciidoc
 %doc                    /usr/local/pf/NEWS.old
 %doc                    /usr/local/pf/README.md