Package: strongswan-swanctl Version: 5.7.2-1 By default file /etc/swanctl/swanctl.conf is world-readable (permissions 644). This file can contain passwords for EAP authentications, therefore it must not be world-readable, as this information is confidential.