[Bug 2092] New: AuthorizedKeysCommand: bad ownership or modes for file

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2092

            Bug ID: 2092
           Summary: AuthorizedKeysCommand: bad ownership or modes for file
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 6.2p1
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: minor
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: descala at gmail.com

Created attachment 2245
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2245&action=edit
Patch uid in auth2-pubkey.c

If AuthorizedKeysCommandUser is set to a non-root user,
AuthorizedKeysCommand is always reported as unsafe:

debug1: temporarily_use_uid: 1000/1000 (e=0/0)
Unsafe AuthorizedKeysCommand: bad ownership or modes for file /xxx
debug1: restore_uid: 0/0

the bug is easily fixed with the attached patch.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.