Raft permissions

Hi is there a recommendation about the permission of the raft directories on a Vault server.

The current ones are
-rw-r–r-- 1 vault vault 110592 Sep 21 07:26 vault.db
-rw------- 1 vault vault 4194304 Sep 21 07:26 raft.db

Does the vault.db need to be similar to raft.db (600) or is there a specific reason for the 644 permissions?

Not sure if the 644 is required, but I don’t think it hurts. The contents of that file is encrypted anyway.

Maybe because it’s easier for backup purposes?

Thank you!

I am currently trying to see if there’s any problem by changing the permission to 600.
So far everything seems to be working fine.

1 Like