FreeNAS

On a FreeNAS 11.0 U2 system I found that any user on the system can read various logs:

xkw7qn97f4st@store01:/var/log/nginx % ls -al /var/log/nginx
total 83
drwxr-xr-x  2 root  wheel       5 Aug 22 00:00 .
drwxr-xr-x  7 root  wheel      57 Aug 23 03:05 ..
-rw-r--r--  1 www   www    197027 Aug 23 08:35 access.log
-rw-r--r--  1 www   www     12482 Aug 22 00:00 access.log.0.bz2
-rw-r--r--  1 root  wheel       0 Aug 11 03:43 error.log
xkw7qn97f4st@store01:/var/log/nginx % 

xkw7qn97f4st@store01:/var/log % ls -al messages*
-rw-------  1 root  wheel  28765 Aug 23 08:30 messages
-rw-r--r--  1 root  wheel  30232 Aug 22 00:00 messages.0.bz2
-rw-r--r--  1 root  wheel  14597 Aug 13 09:00 messages.1.bz2
xkw7qn97f4st@store01:/var/log %

The compressed logs are world readable.

I however think that the nginx logs are logs which primarily shouldn't be world readable as they contain sensitive information about IPs and actions of admins.