do not expose the data to everybody

drupal/drupal-setup.sh

@@ -115,6 +115,7 @@ case "$cmd" in
         fi
 
         #   dump database content to dumpfile (compressed plain SQL format)
+        umask 007
         if [ ".$db_type" = .mysql ]; then
             @l_prefix@/bin/mysqldump --user="$db_suser" --password="$db_spass" "$db_name" | \
             @l_prefix@/lib/openpkg/bzip2 -9 >$dumpfile