add permission settings to postinst