[SOLVED] World-readable permissions on config.xml

[ajgringo619]

Is it necessary to have world-readable (644) permissions on /etc/foldingathome/config.xml? Curious why this is the default when passwords/keys are stored there.

[calxalot]

It can be 0600 if you like.

[ajgringo619]

It can be 0600 if you like.

Thanks; didn't want to mess anything up when it's working so well.

[ajgringo619]

To make the change permanent, I had to add this to the foldingathome.service file:

Code: Select all

# /etc/systemd/system/foldingathome.service.d/override.conf
[Service]
ExecStartPre=!/usr/bin/chmod 600 /etc/foldingathome/config.xml

[calxalot]

You might want to change the umask for user fahclient

[ajgringo619]

You might want to change the umask for user fahclient

Not sure how to do this with a dynamic user, but thanks for the suggestion. My chmod command worked, but it went right back to normal after the next WU was started.

[calxalot]

I think you can add
UMask=0077
in your FAHClient.service

[ajgringo619]

Thank you so much - that did the trick!