Created attachment 458866 [details] security-check-failed.txt Nextcloud have a builtin file integrity security check. See the [Nextcloud documentation](https://docs.nextcloud.com/server/11/admin_manual/issues/code_signing.html) for more information. When installing Nextcloud with webapp-config, webapp-config places the file .webapp-nextcloud-11.0.0 with some text into the root directory. This triggers a security message by the admin user. I have attached the relevant file. The signatures of Nextcloud are stored in ./core/signature.json. Nextcloud offers no way to extend the list of files and recommends the removal of the additional files. Because as far as I know installing with webapp-config is the default gentoo way, I file this bug here. I assume, this bug happens with Owncloud as well (though I've not tested it).
Confirmed, but this needs to be solved upstream. I just submitted an issue and a pull request over there: https://github.com/nextcloud/server/issues/3112 https://github.com/nextcloud/server/pull/3113 I'll try and update this if the PR is accepted and merged.
Thanks for the report and pushing this upstream, for owncloud there is bug #579300 It will be nice not to see this warning anymore indeed (without having to push a webapp-config update/rewrite to handle this)
Some more progress - pull request accepted by one reviewer but still waiting for a second. https://github.com/nextcloud/server/pull/8647
Finally fixed with https://github.com/nextcloud/server/pull/14198 pulled in and 17.0 release! This new version is on its way to portage tree
