Tag 675593 + upstream Thx The current perms are : u=rwx,go=rx
For plugins that don't exec as the correct uid, they cannot create their state file there. Creation of the state file is difficult to delegate correctly, so using the proposed perms is a good compromise. And this fix should happen upstream.