@cryptotaxi247 / netdata-1 / commits / 99ff08cc6

docs: add file permissions and ownership documentation for claim.conf (#22017)

* docs: add file permissions and ownership documentation for claim.conf This commit adds documentation about required file permissions and ownership for claim.conf, which contains sensitive claiming tokens. Changes: - Add 'File Permissions and Ownership' subsection after 'Applying the Configuration' - Document required permissions: 0640 (owner read/write, group read, no world access) - Document required ownership: root:netdata - Include security rationale for why claim.conf should not be world-readable - Note that the claiming script automatically sets these permissions - Use Docusaurus admonition (:::important) for security note * Apply suggestion from @Ancairon * Update README.md --------- Co-authored-by: nedi-audit <nedi-audit@users.noreply.github.com> Co-authored-by: Fotis Voutsas <fotis@netdata.cloud>

nedi-app[bot] committed Mar 24, 2026 at 15:24 UTC 99ff08cc6ef97d595c15e3fec7f6a642a65005fa

1 file changed +14

src/claim/README.md

+14

@@ -40,6 +40,20 @@ Create `/INSTALL_PREFIX/etc/netdata/claim.conf`:

40 insecure = no

41 ```

43 +:::info

44 +

45 +**File Permissions and Ownership:**

46 +

47 +The `claim.conf` file contains sensitive claiming tokens and must be properly secured:

48 +

49 +- **Required permissions:** `0640` (owner read/write, group read, no world access)

50 +- **Required ownership:** `root:netdata` (owner root, group netdata)

51 +

52 +The claiming script automatically sets these permissions when creating or updating `claim.conf`. If you create the file manually, ensure it follows these same security standards to prevent unauthorized access to your claiming tokens.

53 +

54 +:::

55 +

56 +

57 **Configuration Options:**

59 | option | description | required |