The Recoll index holds almost complete copies of the indexed documents. If confidential data is indexed, access to the database directory must be restricted.
Recoll will create the configuration directory with a mode of 0700 on Unix-like systems (access by owner only). As the index data directory is by default a sub-directory of the configuration directory, this should result in appropriate protection.
If you use another setup, you should think of the kind of protection you need for your
index, set the directory and files access modes appropriately, and also maybe adjust the
umask used during index updates.
