diff -Nru horizon-12.0.2/debian/changelog horizon-12.0.2/debian/changelog
--- horizon-12.0.2/debian/changelog	2018-02-02 17:24:37.000000000 -0300
+++ horizon-12.0.2/debian/changelog	2018-04-26 12:47:36.000000000 -0300
@@ -1,3 +1,11 @@
+horizon (3:12.0.2-0ubuntu1.1) artful; urgency=medium
+
+  * d/openstack-dashboard.postinst: Make sure that /var/lib/openstack-dashboard/
+    and /var/lib/openstack-dashboard/secret_key have the appropriate permissions
+    (LP: #1675088).
+
+ -- Felipe Reyes <felipe.reyes@canonical.com>  Thu, 26 Apr 2018 12:47:36 -0300
+
 horizon (3:12.0.2-0ubuntu1) artful; urgency=medium
 
   * New stable point release for OpenStack Pike (LP: #1747065).
diff -Nru horizon-12.0.2/debian/openstack-dashboard.postinst horizon-12.0.2/debian/openstack-dashboard.postinst
--- horizon-12.0.2/debian/openstack-dashboard.postinst	2018-02-02 17:24:10.000000000 -0300
+++ horizon-12.0.2/debian/openstack-dashboard.postinst	2018-04-26 12:47:33.000000000 -0300
@@ -38,6 +38,14 @@
     chmod 0640 /etc/openstack-dashboard/local_settings.py
   fi
 
+  if [ -d /var/lib/openstack-dashboard ] ; then
+      chmod 755 /var/lib/openstack-dashboard
+  fi
+
+  if [ -e /var/lib/openstack-dashboard/secret_key ] ; then
+      chmod 600 /var/lib/openstack-dashboard/secret_key
+  fi
+
   # apache 2.4
   . /usr/share/apache2/apache2-maintscript-helper
   apache2_invoke enconf $CONF || exit $?