pre_upgrade() {
  # fix local old umask
  chmod o+rx,g+rx /usr/share/lynis/{include,db,plugins}
}

post_upgrade() {
  chmod o+r,g+r /usr/share/lynis/include/*
  chmod o+r,g+r /usr/share/lynis/db/*
  chmod o+r,g+r /usr/share/lynis/plugins/*
}