On 20/09/2019 13.36, Tomas Krizek wrote:
  The /etc/knot-resolver/kresd.conf is only writable by
root (0644), as
 well as other files kresd uses in /etc/knot-resolver/ directory,
 therefore I don't believe this is an issue from security point of view. 
Turns out this is incorrect, since you can actually delete the file and
re-create it with other permissions. That's an oversight on my part. In
any case, we'll fix it.
--
Tomas Krizek
PGP: 4A8B A48C 2AED 933B D495  C509 A1FB A5F7 EF8C 4869