--- snapshot-1793008510+++ snapshot-1793354111@@ -20,17 +20,17 @@                                     spantaleev
                                   and
                                     claude
-                                    Update links to the MASH playbook's service documentation
-                                  Open commit details success
-                                Oct 25, 2026
-                                  8e50e58 · Oct 25, 2026
+                                    Make the base directory owned by root
+                                  Open commit details
+                                Oct 30, 2026
+                                  5a3137c · Oct 30, 2026
 
                                   History
 
                                   History
                                     Open commit details
                                     History
-                                      4961 lines (2649 loc) · 366 KB
+                                      4971 lines (2654 loc) · 367 KB
                                             /
 
                                             CHANGELOG.md
@@ -43,12 +43,22 @@                                           * Preview
                                           * Code
                                           * Blame
-                                            4961 lines (2649 loc) · 366 KB
+                                            4971 lines (2654 loc) · 367 KB
                                             Raw
                                             Copy raw file
                                             Download raw file
                                       Outline
                                         Edit and raw actions
+
+                                    2026-10-30
+
+                                    The base directory (/matrix) is now owned by root
+
+                                  The playbook now makes the base directory (matrix_base_data_path, /matrix by default) and its bin directory owned by root, with the matrix group and the same mode (0750). Previously they were owned by the matrix user.
+
+                                  Whoever owns this directory can rename any service's directory in it, even one owned by root, and put another in its place. A service that runs something as root from its directory relies on this not being possible.
+
+                                  Nothing changes for you: the services' own directories keep their owners, and the matrix user can still reach them through the group. Re-running the playbook (just install-all) changes the owner. To keep the old owner, set matrix_base_data_path_owner: "{{ matrix_user_name }}" in your vars.yml file (not recommended).
 
                                     2026-10-19