The default linux tar install has the following for security2.fdb amongst others

MakeFileFirebirdWritable() {
FileName=$1
chown $RunUser:$RunGroup $FileName

if [ "$RunUser" = "root" ]
# In that case we must open databases, locks, etc. to the world...
# That's a pity, but required if root RunUser choosen.
then
chmod a=rw $FileName
else
# This is good secure setting
chmod ug=rw,o= $FileName
fi

Paul Beach
Tel (France): +33 (0) 2 47 58 30 43
Mob (France): +33 (0) 6 79 24 32 32