Permission of /dev/ipsec* files

[venky8125]

Hi,

My security team has pointed that the following 2 files are having World writable permissions [666]

/dev/ipseckey : crw-rw-rw-

/dev/ipsecpol : crw-rw-rw-

When I checked my other production servers they were having only [664]

crw-rw-r--   /dev/ipseckey

crw-rw-r--   /dev/ipsecpol

so my question is,

Can we change the permissions to the above as 664.

Can we change the permission online?

Will there be any impact?

Kindly reply me with your opinion on this regard. 

Thanks and regards,

Venkatesan.