Minor improvements to netdata-security.md (#14815)
Update netdata-security.md
Chris Akritidis committed
Mar 27, 2023 at 11:13 UTC
6e89962c6c81d0a363099f559595032fcbb30707
1 file changed
+6
-22
docs/netdata-security.md
+6
-22
@@ -1,4 +1,4 @@
1
-# Security design
1
+# Security and privacy design
2
3
This document serves as the relevant Annex to the [Terms of Service](http://netdata.cloud/service-terms/) and
4
the Data Processing Addendum, when applicable. It provides more information regarding Netdata’s technical and organizational security and privacy measures.
@@ -14,26 +14,6 @@ over Netdata Cloud, as they also travel over third party networks, to reach your
14
but Netdata Cloud does not store metric data. It only transforms them as they pass through it, aggregating them from multiple Agents and Parents,
15
to appear as one data source on your browser.
16
17
-**Table of Contents**
18
-- [Cloud design](#cloud-design)
19
- - [User identification and authorization](#user-identification-and-authorization)
20
- - [Personal Data stored](#personal-data-stored)
21
- - [Infrastructure data stored](#infrastructure-data-stored)
22
- - [Data transfer](#data-transfer)
23
- - [Data retention](#data-retention)
24
- - [Data portability and erasure](#data-portability-and-erasure)
25
-- [Agent design](#agent-design)
26
- - [Your data is safe with Netdata](#your-data-is-safe-with-netdata)
27
- - [Your systems are safe with Netdata](#your-systems-are-safe-with-netdata)
28
- - [Netdata is read-only](#netdata-is-read-only)
29
- - [Protect Netdata from the internet](#protect-netdata-from-the-internet)
30
- - [Anonymous Statistics](#anonymous-statistics)
31
- - [Netdata directories](#netdata-directories)
32
-- [Organization processes](#organization-processes)
33
- - [Employee identification and authorization](#employee-identification-and-authorization)
34
- - [Systems security](#systems-security)
35
-
36
-
17
## Cloud design
18
19
### User identification and authorization
@@ -180,6 +160,9 @@ about the information collected and learn how to opt-out, on our
160
161
### Netdata directories
162
163
+The agent stores data in 6 different directories on your system.
164
+<details>
165
+<summary>See more</summary>
166
| path|owner|permissions|Netdata|comments|
167
|:---|:----|:----------|:------|:-------|
168
| `/etc/netdata`|user `root`<br/>group `netdata`|dirs `0755`<br/>files `0640`|reads|**Netdata config files**<br/>may contain sensitive information, so group `netdata` is allowed to read them.|
@@ -188,7 +171,8 @@ about the information collected and learn how to opt-out, on our
171
| `/var/cache/netdata`|user `netdata`<br/>group `netdata`|dirs `0750`<br/>files `0660`|reads, writes, creates, deletes|**Netdata ephemeral database files**<br/>Netdata stores its ephemeral real-time database here.|
172
| `/var/lib/netdata`|user `netdata`<br/>group `netdata`|dirs `0750`<br/>files `0660`|reads, writes, creates, deletes|**Netdata permanent database files**<br/>Netdata stores here the registry data, health alarm log db, etc.|
173
| `/var/log/netdata`|user `netdata`<br/>group `root`|dirs `0755`<br/>files `0644`|writes, creates|**Netdata log files**<br/>all the Netdata applications, logs their errors or other informational messages to files in this directory. These files should be log rotated.|
191
-
174
+</details>
175
+
176
## Organization processes
177
178
### Employee identification and authorization