[Bug 2955] Warning message StrictModes=yes and $HOME has g+w

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Sat Jan 19 07:47:01 AEDT 2019


https://bugzilla.mindrot.org/show_bug.cgi?id=2955

Darren Tucker <dtucker at dtucker.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at dtucker.net

--- Comment #1 from Darren Tucker <dtucker at dtucker.net> ---
We actually do almost exactly what you are describing (including -v)
except that the message is only sent after authentication (eg via
password) because we try not to leak any authentication information to
unauthenticated users.  Unfortunately since you didn't have any other
method this didn't help you, but I don't see this as something that we
should change, sorry.

$ chmod 777 ~/.ssh
$ ssh -v localhost
[...]
debug1: Offering public key: [...]
debug1: Authentications that can continue:
publickey,password,keyboard-interactive
debug1: Next authentication method: password
dtucker at localhost's password: 
[...]
debug1: Remote: Ignored authorized keys: bad ownership or modes for
directory /home/dtucker/.ssh
Last login: Sat Feb 24 00:47:25 2018 from 127.0.0.1
[...]

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list