diff --git a/debian/python3-patchman.postinst b/debian/python3-patchman.postinst
index 9fa07a29..b64cb816 100644
--- a/debian/python3-patchman.postinst
+++ b/debian/python3-patchman.postinst
@@ -12,9 +12,6 @@ if [ "$1" = "configure" ] ; then
     . /usr/share/apache2/apache2-maintscript-helper
     apache2_invoke enconf patchman.conf
 
-    adduser --system --group patchman-celery
-    usermod -a -G www-data patchman-celery
-
     patchman-set-secret-key
     chown www-data /etc/patchman/local_settings.py
 
@@ -26,6 +23,9 @@ if [ "$1" = "configure" ] ; then
     sqlite3 /var/lib/patchman/db/patchman.db 'PRAGMA journal_mode=WAL;'
 
     chown -R www-data:www-data /var/lib/patchman
+    adduser --system --group patchman-celery
+    usermod -a -G www-data patchman-celery
+    chmod g+w /var/lib/patchman /var/lib/patchman/db /var/lib/patchman/db/patchman.db
 
     echo
     echo "Remember to run 'patchman-manage createsuperuser' to create a user."
diff --git a/scripts/rpm-post-install.sh b/scripts/rpm-post-install.sh
index 6c88a917..5efcc24b 100644
--- a/scripts/rpm-post-install.sh
+++ b/scripts/rpm-post-install.sh
@@ -23,6 +23,9 @@ patchman-manage migrate --run-syncdb --fake-initial
 sqlite3 /var/lib/patchman/db/patchman.db 'PRAGMA journal_mode=WAL;'
 
 chown -R apache:apache /var/lib/patchman
+adduser --system --group patchman-celery
+usermod -a -G apache patchman-celery
+chmod g+w /var/lib/patchman /var/lib/patchman/db /var/lib/patchman/db/patchman.db
 chcon --type httpd_sys_rw_content_t /var/lib/patchman/db/patchman.db
 semanage port -a -t http_port_t -p tcp 5672
 setsebool -P httpd_can_network_memcache 1