[Bug 3982] WARNING: UNPROTECTED PRIVATE KEY FILE does not do what it is expected to do.

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Thu Jul 23 23:06:28 AEST 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=3982

--- Comment #1 from for_bugzilla.mindrot.org_2022-09-08 at lockywolf.net ---
Moreover, it's a wrong approach, really.

I have a group called ssh-key-users, which share the same key.
They can read it (and thus authenticate with), but not write, the file
is generated by root, and added to the server by me.

There is nothing wrong with having a key with permissions 640.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list