Permission folder 755 or 750 enquiry

Hi everyone,

I am currently running Grafana on a Linux OS and I’ve encountered an issue related to file permissions. During a vulnerability scan, I was advised that the permissions on the Grafana installation folder should be set to 750, but when I change them from the default 755 to 750, the Grafana server fails to start. This results in an inability to access to the Grafana interface.

Here are some specifics:

  • The default permission is 755, and Grafana runs fine with that.
  • After changing the permissions to 750, the Grafana server process fails to start, and I cannot access the web page.

Has anyone else experienced this issue? Should Grafana run fine with 755 permissions, or is 750 required for security reasons? If 750 is indeed needed, any advice on which files need special permissions would be much appreciated.

Thanks!

Installation + assets (must be readable)
chmod 755 /usr/share/grafana
chmod 755 /usr/share/grafana/public
chmod 755 /usr/sbin/grafana-server

Sensitive locations
chown -R grafana:grafana /etc/grafana /var/lib/grafana /var/log/grafana
chmod 750 /etc/grafana
chmod 750 /var/lib/grafana
chmod 750 /var/log/grafana