On 2020/04/14 14:59, Martin Reindl wrote: > On Fri, Mar 13, 2020 at 02:18:34PM +0000, Kevin Chadwick wrote: > > On 2020-03-13 14:10, Kevin Chadwick wrote: > > > Grafana only runs as one user, so should work well. Ideally the config > > > would > > > still be world readable and the secrets separated out. > > > > I should say that by ideally I just mean in case the config and anything > > else is > > useful to multiple users, rather than having a use case in mind. I think the > > config atleast can be taken from the http api anyway. > > Attached is an update to the latest 6.7.2 release incorporating some security > fixes. I would greatly appreciate if this could make release.
OK. > Currently there is no change to file permissions. Is there a consensus? Or > even a diff floating around as landry@ hinted? my 2p: setting the directory 750 is a pain for tab completion, so if this is changed I think it would be better to set permissions on the sensitive files only.
