live-persist: ASP config file should be world-readable

Refs: #14594

config/chroot_local-includes/usr/local/sbin/live-persist

@@ -374,8 +374,7 @@ activate_volumes ()
 
 	# Regardless of the mountpoint access rights, disable persistence
 	# configuration files with wrong access rights.
-	for f in $(ls /live/persistence/*_unlocked/persistence.conf \
-	              /live/persistence/*_unlocked/live-additional-software.conf || true)
+	for f in $(ls /live/persistence/*_unlocked/persistence.conf || true)
 	do
 		if ! persistence_conf_file_has_correct_access_rights "$f" "600"
 		then
@@ -383,6 +382,14 @@ activate_volumes ()
 			disable_and_create_empty_persistence_conf_file "$f"
 		fi
 	done
+	for f in $(ls /live/persistence/*_unlocked/live-additional-software.conf || true)
+	do
+		if ! persistence_conf_file_has_correct_access_rights "$f" "644"
+		then
+			warning "Disabling '$f', that has unsafe access rights"
+			disable_and_create_empty_persistence_conf_file "$f"
+		fi
+	done
 
 	# Migrate persistence settings
 	for conf in $(ls /live/persistence/*_unlocked/persistence.conf || true)