[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[no subject]
>
> That's bee a problem on RH forever, and I can't decide if itis a bug
> in RH, OpenSSH, or neither. RH uses their clever "every user gets
> their own group" system which allows everyone to have a 002 umod
> instead of the more traditional 022. I'm pretty sure that that is
> what causes the keyfile to end up with "wrong" permissions. It is
> group writable and SSH doesn't like that.
>
> I think the RH group system is quite clever. It allows teams to setup
> directories that the team can write to very easily. But it does cause
> problems with SSH. So, who is at fault?
RedHat. ssh-keygen should be modified to generate proper keys or ssh
should be modified to accept the ssh-keygen'ed keys. The most correct
way would be to mod keygen and a more restrictive perm setting on the
keys and directory are not an issue for ssh.
Hmm. The more I think about it, it's a bug in keygen. If the default
form produces keys/directory with 660 perms, that is just plain wrong.
keygen is supposed to be a support tool for ssh so it should function
properly.
>
> Michael
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> <a rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
--
James P. Kinney III \Changing the mobile computing world/
CEO & Director of Engineering \ one Linux user /
Local Net Solutions,LLC \ at a time. /
770-493-8244 \.___________________________./
<a rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>
GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00447" href="msg00447.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> kaboom at oobleck.net (Chris Ricker)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00360" href="msg00360.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> f.grant.robertson at gmail.com (Grant Robertson)</li></ul></li>
<li><strong><a name="00361" href="msg00361.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> joe.sechman at gmail.com (Joe Sechman)</li></ul></li>
<li><strong><a name="00362" href="msg00362.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> f.grant.robertson at gmail.com (Grant Robertson)</li></ul></li>
<li><strong><a name="00369" href="msg00369.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> mhw at wittsend.com (Michael H. Warfield)</li></ul></li>
<li><strong><a name="00423" href="msg00423.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> bob at verysecurelinux.com (Bob Toxen)</li></ul></li>
<li><strong><a name="00428" href="msg00428.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
<ul><li><em>From:</em> mdhirsch at gmail.com (Michael Hirsch)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00433.html">[ale] Evolution behavior</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00435.html">[ale] Evolution behavior</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00428.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00447.html">[ale] ssh authorized_keys2, what am I missing?</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00434"><strong>Date</strong></a></li>
<li><a href="threads.html#00434"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>