[Bug 2955] New: Warning message StrictModes=yes and $HOME has g+w

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2955

            Bug ID: 2955
           Summary: Warning message StrictModes=yes and $HOME has g+w
           Product: Portable OpenSSH
           Version: 7.7p1
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: mkg at vt.edu

Motivation: I was unable to login to a server, which only allows SSH
keys for authentication, because I had (accidentally) given g+w
permissions to $HOME and StrictModes=yes in sshd. The MOTD is shown but
then I was prompted for a password which I could not give because there
is none. I finally contacted a sysadmin and he looked in the sshd logs
to find the problem.

Suggestion: it would be nice to have a warning message, perhaps only
shown with -v, that hints to check for that or other potential login
issues so that the user has a means of starting to debug the problem.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.