Permission Denied Halfway Down the Path

ledgerd runs as the user ledgerd and fails at start-up with Permission denied reading /srv/lab/apps/ledgerd/config/app.yaml.

Task

• User ledgerd can read app.yaml.
• ledgerd must not be able to change app.yaml.
• ledgerd must not be able to read /srv/lab/apps/ledgerd/config/secrets/signing.pem.
• Other accounts (for example student) still cannot read app.yaml.
• Nothing is made readable or writable by everyone (no o+r, no 777).