cleanups and code fixes incl templ

src/postinstall.sh

@@ -100,6 +100,15 @@ merge_missing_settings_from_rpmnew() {
 
 merge_missing_settings_from_rpmnew "$TARGET_CFG" "$SOURCE_CFG" || :
 
+if [ -f "$TARGET_CFG" ]; then
+    chown root:dtms "$TARGET_CFG" || :
+    chmod 640 "$TARGET_CFG" || :
+fi
+if [ -f "$SOURCE_CFG" ]; then
+    chown root:dtms "$SOURCE_CFG" || :
+    chmod 640 "$SOURCE_CFG" || :
+fi
+
 if command -v systemctl >/dev/null 2>&1; then
     systemctl daemon-reload || :
     if [ "${1:-0}" -eq 1 ]; then