The current config write API requires that any process that changes it is run with vyattacfg GID, else permissions get messed up and other users cannot commit until the active config dir is chown'ed back.
This is especially problematic with automatically run scripts.
We have three places that run scripts:
- [x] VRRP
- [ ] WAN load balancing
- [ ] Cron