-
Type:
Change Request
-
Resolution: Unresolved
-
Priority:
Major
-
None
-
Affects Version/s: 7.0.27, 7.4.11
-
Component/s: Server (S)
Starting from Zabbix 7.0.22, real-time export files created by the ExportDir functionality are created with restricted permissions. The file owner has read/write access, the owner group has read access, and all other permissions are denied. This results in mode 640.
Current behavior:
- ExportDir creates real-time export files with mode 640 since Zabbix 7.0.22.
- There is no Zabbix server configuration parameter to change this mode.
- The available parameters for this feature are ExportDir, ExportFileSize, and ExportType.
Requested behavior:
- Add a Zabbix server configuration parameter to control permissions for files created by ExportDir.
- Keep the current 640 behavior as the default.
- Allow administrators to choose a less restrictive mode when required by their environment, for example 644 or 664.
- Validate the configured value so unsafe or invalid modes are rejected.
Possible implementation:
ExportFileMode=0640
or, if a more specific name is preferred:
ExportDirFileMode=0640