MB-8046: don't make $prefix/var/lib/couchbase world-readable

I.e. because we store some sensitive stuff inside.

Change-Id: Icdd2df1e3ff37d04d4e714ddc7c34ae0d4a13802
Reviewed-on: http://review.couchbase.org/25579
Reviewed-by: Aliaksey Kandratsenka <alkondratenko@gmail.com>
Tested-by: Aliaksey Kandratsenka <alkondratenko@gmail.com>

Makefile

@@ -142,7 +142,8 @@ do-install:
 	cp cbbrowse_logs $(DESTDIR)$(PREFIX)/bin/cbbrowse_logs
 	cp cbcollect_info $(DESTDIR)$(PREFIX)/bin/cbcollect_info
 	chmod +x $(DESTDIR)$(PREFIX)/bin/couchbase-server $(DESTDIR)$(PREFIX)/bin/cbbrowse_logs $(DESTDIR)$(PREFIX)/bin/cbcollect_info
-	mkdir -p $(DESTDIR)$(PREFIX)/var/lib/couchbase/logs
+	mkdir -p -m 0770 $(DESTDIR)$(PREFIX)/var/lib/couchbase
+	mkdir -p -m 0770 $(DESTDIR)$(PREFIX)/var/lib/couchbase/logs
 	cp ebucketmigrator $(DESTDIR)$(PREFIX)/bin/ebucketmigrator
 	chmod +x $(DESTDIR)$(PREFIX)/bin/ebucketmigrator
 	cp scripts/cbdump-config $(DESTDIR)$(PREFIX)/bin/

couchbase-server.sh.in

@@ -119,6 +119,8 @@ _start() {
     GLIBCXX_FORCE_NEW=1
     export GLIBCXX_FORCE_NEW
 
+    umask 007
+
     exec erl \
         +A 16 \
         -smp enable \