Debian package: sqlite db, media and logs are world-readable by default

[MRAAGH]

The following files and directories are world-readable by default:

• /var/lib/matrix-synapse/
• /var/lib/matrix-synapse/homeserver.db
• /var/lib/matrix-synapse/media/
• /var/log/matrix-synapse/homeserver.log

All of these contain sensitive user information and should not be world-readable!

Installation package: matrix-synapse-py3 from packages.matrix.org
Synapse version: {"server_version":"1.33.2","python_version":"3.7.3"}
OS: Debian 10

Related issues:

• Debian package: homeserver.yaml is world-readable #6364 (permissions of homeserver.yaml)
• --generate-keys creates world readable private key (SYN-671) #1528 (permissions of private key)

[richvdh]

I think this is a dup of #2955