diff --git a/oam/install_scripts/columnstore b/oam/install_scripts/columnstore
index 3a7777320..c236be011 100644
--- a/oam/install_scripts/columnstore
+++ b/oam/install_scripts/columnstore
@@ -81,7 +81,7 @@ start() {
 		exit 0
 	fi
 
-	($SUDO mkdir -p /var/lock/subsys && $SUDO chmod 777 /var/lock/subsys && $SUDO touch /var/lock/subsys/columnstore) >/dev/null 2>&1
+	($SUDO mkdir -p /var/lock/subsys && $SUDO chmod 755 /var/lock/subsys && $SUDO touch /var/lock/subsys/columnstore) >/dev/null 2>&1
 
 	if [ -x $InstallDir/bin/columnstore.pre-start ]; then
 		$InstallDir/bin/columnstore.pre-start
diff --git a/oam/install_scripts/post-install b/oam/install_scripts/post-install
index caf0946b2..7027cc702 100755
--- a/oam/install_scripts/post-install
+++ b/oam/install_scripts/post-install
@@ -123,7 +123,7 @@ cd /
 
 test -d /var/log/mariadb || $SUDO mkdir /var/log/mariadb >/dev/null 2>&1
 test -d /var/log/mariadb/columnstore || $SUDO mkdir /var/log/mariadb/columnstore >/dev/null 2>&1
-$SUDO chmod -R 777 /var/log/mariadb
+$SUDO chmod -R 755 /var/log/mariadb
 
 test -d /var/log/mariadb/columnstore/archive || mkdir /var/log/mariadb/columnstore/archive >/dev/null 2>&1
 test -d /var/log/mariadb/columnstore/corefiles || mkdir /var/log/mariadb/columnstore/corefiles >/dev/null 2>&1
@@ -206,24 +206,22 @@ fi
 #setup MariaDB Columnstore system logging
 if [ $user = "root" ]; then
 	$installdir/bin/syslogSetup.sh install > /tmp/syslog_install.log 2>&1
-	chmod 777 -R /dev/shm
 	rm -f /etc/default/columnstore
 else
-	$SUDO chmod 777 /tmp
+	$SUDO chmod 755 /tmp
 	$SUDO rm -fr /tmp/* > /dev/null 2>&1
 	$SUDO $installdir/bin/syslogSetup.sh --installdir=$installdir install > /tmp/syslog_install.log 2>&1
 	$SUDO chown $user:$user $installdir/etc/Columnstore.xml
-	$SUDO chmod -R 777 /dev/shm
+	$SUDO chmod -R 755 /dev/shm
 	$SUDO mkdir /var/lock/subsys > /dev/null 2>&1
-	$SUDO chmod 777 /var/lock/subsys > /dev/null 2>&1
+	$SUDO chmod 755 /var/lock/subsys > /dev/null 2>&1
 	$SUDO rm -f /var/lock/subsys/mysql-Columnstore
-	$SUDO chmod 777 /etc/fstab	
+	$SUDO chmod 755 /etc/fstab	
 
 	sed -i -e s@/usr/local/mariadb/columnstore@$installdir@g $installdir/bin/columnstore.def
 	$SUDO cp $installdir/bin/columnstore.def /etc/default/columnstore
 
 	sed -i -e s@prefix=/usr/local@prefix=$HOME@g $installdir/bin/*
-
 fi
 
 #check if MariaDB Columnstore system logging was setup
diff --git a/procmon/main.cpp b/procmon/main.cpp
index aa210ef85..b521a9008 100644
--- a/procmon/main.cpp
+++ b/procmon/main.cpp
@@ -119,11 +119,11 @@ int main(int argc, char **argv)
    		USER = p;
 
 	// change permissions on /dev/shm
-	string cmd = "chmod 777 /dev/shm >/dev/null 2>&1";
 	if ( !rootUser)
-		cmd = "sudo chmod 777 /dev/shm >/dev/null 2>&1";
-
-	system(cmd.c_str());
+	{
+		string cmd = "sudo chmod 755 /dev/shm >/dev/null 2>&1";
+		system(cmd.c_str());
+	}
 
   	// get and set locale language    
 	string systemLang = "C";
diff --git a/procmon/processmonitor.cpp b/procmon/processmonitor.cpp
index e474c69d5..dbcf4225c 100644
--- a/procmon/processmonitor.cpp
+++ b/procmon/processmonitor.cpp
@@ -950,11 +950,11 @@ void ProcessMonitor::processMessage(messageqcpp::ByteStream msg, messageqcpp::IO
 					log.writeLog(__LINE__,  "MSG RECEIVED: Start All process request...");
 
 					// change permissions on /dev/shm
-					string cmd = "chmod 755 /dev/shm >/dev/null 2>&1";
 					if ( !rootUser)
-						cmd = "sudo chmod 777 /dev/shm >/dev/null 2>&1";
-				
-					system(cmd.c_str());
+					{
+						cmd = "sudo chmod 755 /dev/shm >/dev/null 2>&1";				
+						system(cmd.c_str());
+					}
 
 					//start the mysql daemon 
 					try {