Fix data directory chmod

.ci-make.sh

@@ -129,5 +129,18 @@ case "$1" in
 		curl http://localhost:3000/ | grep -A 4 "Powered by Forgejo"
 		exit $?
 		;;
+	"verify-data-dir-chmod")
+		$DATA_DIR_CHMOD="$(stat -c %a /var/lib/forgejo)"
+		if [ "$DATA_DIR_CHMOD" = "750" ]; then
+			exit 0
+		else
+			exit 100
+		fi
+		;;
+	"force-clean-forgejo")
+		apt install -y psmisc
+		killall forgejo
+		exit $?
+		;;
 esac
 		

.crystalintegration.yml

@@ -305,6 +305,9 @@ steps:
     group: pkg-test-5
     commands:
       - ./.ci-make.sh install-repo-test ./repo-deb/forgejo-deb-repo_0-0_all.deb forgejo-sqlite
+      - ./.ci-make.sh force-clean-forgejo
+      - ./.ci-make.sh install-run-test ./forgejo-sqlite_*_amd64.deb
+      - ./.ci-make.sh verify-data-dir-chmod
 
   upload-crystalcommit:
     image: woodpeckerci/plugin-gitea-release

deb/debian/changelog

@@ -2,6 +2,7 @@ forgejo (1.20.5.1-0) unstable; urgency=medium
 
   * Forgejo version 1.20.5-1
   * app.ini: Replaced example with blank default
+  * Change data directory mode to 750
   * See https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#1-20-5-1
 
  -- crystal <crystal@noreply.codeberg.org>  Sat, 25 Nov 2023 23:40:00 +0000

deb/debian/forgejo.preinst

@@ -29,6 +29,6 @@ case "$1" in
              $FORGEJO_USER
   if ! dpkg-statoverride --list $FORGEJO_HOME >/dev/null ; then
     chown -R $FORGEJO_USER:$FORGEJO_GROUP $FORGEJO_HOME
-    chmod u=rwx,g=rwx,o= $FORGEJO_HOME
+    chmod u=rwx,g=rx,o= $FORGEJO_HOME
   fi
 esac