Default file permissions correct?

Setup, Configuration and Use Installation
1

I just created a openhab container in docker and realized all default files (like /etc/openhab2/services/addons.cfg) are readable by everyone.

-rw-rw-r--  1 openhab openhab 2986 Sep  3 00:06 runtime.cfg

Since this file will most likely contain clear text passwords I think this should be changed by default.
-rw-rw---- would be better, I think.

But I am not a linux expert.
Maybe there is a good reason for this.

The same goes for a normal installation on Raspbian via apt-get.

2

That is the standard file permissions. I don’t think there is any reason it has to have world read permissions. You can always sudo chmod -R w-r /etc/openhab2 then restart OH while watching the logs. I doubt you will see any errors. OH runs as the OH user who does have permission.

I think the issue for this would go in the openhab-distro repo, but an not certain.