rpm: set sgid for data directories

Make sure that contents belong to qubes group, even when created by root
user.

rpm_spec/core-dom0.spec

@@ -314,13 +314,13 @@ fi
 %{_unitdir}/qubes-vm@.service
 %{_unitdir}/qubes-reload-firewall@.service
 %{_unitdir}/qubes-reload-firewall@.timer
-%attr(0770,root,qubes) %dir /var/lib/qubes
-%attr(0770,root,qubes) %dir /var/lib/qubes/vm-templates
-%attr(0770,root,qubes) %dir /var/lib/qubes/appvms
-%attr(0770,root,qubes) %dir /var/lib/qubes/servicevms
-%attr(0770,root,qubes) %dir /var/lib/qubes/backup
-%attr(0770,root,qubes) %dir /var/lib/qubes/dvmdata
-%attr(0770,root,qubes) %dir /var/lib/qubes/vm-kernels
+%attr(2770,root,qubes) %dir /var/lib/qubes
+%attr(2770,root,qubes) %dir /var/lib/qubes/vm-templates
+%attr(2770,root,qubes) %dir /var/lib/qubes/appvms
+%attr(2770,root,qubes) %dir /var/lib/qubes/servicevms
+%attr(2770,root,qubes) %dir /var/lib/qubes/backup
+%attr(2770,root,qubes) %dir /var/lib/qubes/dvmdata
+%attr(2770,root,qubes) %dir /var/lib/qubes/vm-kernels
 /usr/share/qubes/xen-vm-template.xml
 /usr/share/qubes/vm-template-hvm.xml
 /usr/bin/xenstore-watch-qubes