From af5ffd6d09273195669b273a77c28bcda5936f64 Mon Sep 17 00:00:00 2001
From: Praveen Arimbrathodiyil <praveen@debian.org>
Date: Sat, 2 Apr 2016 19:50:36 +0530
Subject: [PATCH] make uploads directory permissions 0700

---
 debian/postinst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/debian/postinst b/debian/postinst
index 7be9080863..099e135f0f 100755
--- a/debian/postinst
+++ b/debian/postinst
@@ -50,6 +50,8 @@ case "$1" in
       chown -R ${gitlab_user}: $i
     done
 
+    chmod 0700 ${gitlab_uploads_path}
+
     # nginx should be able to connect to gitlab-workhorse.socket and serve public
     chown ${gitlab_user}:${nginx_user} -R ${gitlab_uploads_path}/.. ${gitlab_pid_path}