Linux Aspia Router probably wrong access permissions for router.json

[gleruzh]

Describe the bug
The /etc/aspia/router.json contents router's private key, so it should have 600. Or 640 at least (like /etc/shadow)
Now it has 664 so anyone can open router.json for reading.

Expected behavior

$ ls -la /etc/aspia/router.json
-rw------- 1 root root 299 Oct 27 14:15 /etc/aspia/router.json

or

$ ls -la /etc/aspia/router.json
-rw-r----- 1 root root 299 Oct 27 14:15 /etc/aspia/router.json

Server

• Ubuntu 20.04
• Aspia version 2.1

Additional context
Add any other context about the problem here.

[andreymal]

I think /var/lib/aspia/router.db3 should also have 600/640