I just created a openhab container in docker and realized all default files (like
/etc/openhab2/services/addons.cfg) are readable by everyone.
-rw-rw-r-- 1 openhab openhab 2986 Sep 3 00:06 runtime.cfg
Since this file will most likely contain clear text passwords I think this should be changed by default.
-rw-rw---- would be better, I think.
But I am not a linux expert.
Maybe there is a good reason for this.
The same goes for a normal installation on Raspbian via apt-get.