radiusd -XC seems to produce what I was looking for, thanks.
James Devine wrote:It already checks that.
> * globally writable I mean
$ chmod a+w raddb/proxy.con
$ radiusd -XC
...
Configuration file ./raddb//proxy.conf is globally writable. Refusing
to start due to insecure configuration.
Errors reading or parsing ./raddb//debug.conf
If you don't see this, it's because you're running a very old version
without that check, or raddb/proxy.conf isn't actually globally writable.