Using "auditd", I have discovered that the issue is caused by script "/usr/lib/cnf-update-db", which periodically deletes the old database and creates a new file with restricted permissions.
Using "auditd", I have discovered that the issue is caused by script "/usr/lib/ cnf-update- db", which periodically deletes the old database and creates a new file with restricted permissions.