# as here private data is stored we need tighter perms here strongswan-starter: non-standard-dir-perm etc/ipsec.d/private/ 0700 != 0755 strongswan-starter: non-standard-file-perm etc/ipsec.secrets 0600 != 0644 strongswan-starter: non-standard-dir-perm var/lib/strongswan/ 0700 != 0755