From 5c6c6f272cdb805c2253a6957a142e6dcaa1fa56 Mon Sep 17 00:00:00 2001
From: TomZ <tom@flowee.org>
Date: Mon, 21 Feb 2022 22:28:13 +0100
Subject: [PATCH] Fix security issue.

The docs state that you need to make the config file _readable_
and then proceeds to make the file writable.

This changes it to make the file to be owned by root and readable by
anyone. This is the default for unix / linux and suggested practice
for files in /etc.
---
 DEPLOY.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/DEPLOY.md b/DEPLOY.md
index a28218d7..60634825 100644
--- a/DEPLOY.md
+++ b/DEPLOY.md
@@ -142,7 +142,8 @@ As we are using a Conduit specific user we need to allow it to read the config.
 Debian:
 
 ```bash
-sudo chown -R conduit:nogroup /etc/matrix-conduit
+sudo chown -R root:root /etc/matrix-conduit
+sudo chmod 755 /etc/matrix-conduit
 ```
 
 If you use the default database path you also need to run this: