Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. The Lounge
  3. File permission warnings

File permission warnings

Scheduled Pinned Locked Moved The Lounge
2 Posts 2 Posters 442 Views 2 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • jdaviescoatesJ Offline
    jdaviescoatesJ Offline
    jdaviescoates
    wrote on last edited by
    #1

    I'm seeing this:

    Dec 13 22:04:492023-12-13 22:04:49 [WARN] /app/data/logs is world readable. The log files may be exposed. Please fix the permissions.
    Dec 13 22:04:492023-12-13 22:04:49 [WARN] /app/data/vapid.json is world readable. The file contains secrets. Please fix the permissions.
    Dec 13 22:04:492023-12-13 22:04:49 [WARN] Unknown key "displayNetwork", please verify your config.
    Dec 13 22:04:492023-12-13 22:04:49 [WARN] run `chmod o-x "/app/data/logs"` to correct it.
    Dec 13 22:04:492023-12-13 22:04:49 [WARN] run `chmod o= "/app/data/vapid.json"` to correct it.
    

    Should I actually try and do that somewhere? if so, where? in the web terminal of the app? or?

    Or does the package need fixing?

    I use Cloudron with Gandi & Hetzner

    1 Reply Last reply
    0
    • girishG Offline
      girishG Offline
      girish
      Staff
      wrote on last edited by
      #2

      I have symlinked logs now

      The displayNetwork key is removed. You can delete it in /app/data/config.js manually (new package does not have it anymore).

      1 Reply Last reply
      1
      Reply
      • Reply as topic
      Log in to reply
      • Oldest to Newest
      • Newest to Oldest
      • Most Votes


      • Login

      • Don't have an account? Register

      • Login or register to search.
      • First post
        Last post
      0
      • Categories
      • Recent
      • Tags
      • Popular
      • Bookmarks
      • Search