diff -Nru horizon-13.0.0/debian/changelog horizon-13.0.0/debian/changelog
--- horizon-13.0.0/debian/changelog	2018-02-28 16:23:55.000000000 -0300
+++ horizon-13.0.0/debian/changelog	2018-04-25 16:29:58.000000000 -0300
@@ -1,3 +1,11 @@
+horizon (3:13.0.0-0ubuntu1.1) bionic; urgency=medium
+
+  * d/openstack-dashboard.postinst: Make sure that /var/lib/openstack-dashboard/
+    and /var/lib/openstack-dashboard/secret_key have the appropriate permissions
+    (LP: #1675088).
+
+ -- Felipe Reyes <felipe.reyes@canonical.com>  Wed, 25 Apr 2018 16:29:58 -0300
+
 horizon (3:13.0.0-0ubuntu1) bionic; urgency=medium
 
   * New upstream release for OpenStack Queens.
diff -Nru horizon-13.0.0/debian/openstack-dashboard.postinst horizon-13.0.0/debian/openstack-dashboard.postinst
--- horizon-13.0.0/debian/openstack-dashboard.postinst	2018-02-28 16:23:03.000000000 -0300
+++ horizon-13.0.0/debian/openstack-dashboard.postinst	2018-04-25 16:13:09.000000000 -0300
@@ -38,6 +38,14 @@
     chmod 0640 /etc/openstack-dashboard/local_settings.py
   fi
 
+  if [ -d /var/lib/openstack-dashboard ] ; then
+      chmod 755 /var/lib/openstack-dashboard
+  fi
+
+  if [ -e /var/lib/openstack-dashboard/secret_key ] ; then
+      chmod 600 /var/lib/openstack-dashboard/secret_key
+  fi
+
   # apache 2.4
   if [ -e /usr/share/apache2/apache2-maintscript-helper ] ; then
       . /usr/share/apache2/apache2-maintscript-helper