FreeBSD Security Advisory – The default permission set by bsdinstall installer when configuring full disk encrypted ZFS is too open. A local attacker may be able to get a copy of the geli provider’s keyfile which is located at a fixed location.