ssh: doesn't live well with user-group system

Markus Friedl markus.friedl at informatik.uni-erlangen.de
Fri Dec 29 00:38:26 EST 2000


On Thu, Dec 28, 2000 at 02:23:49PM +0100, Christian Kurz wrote:
> > user at host:~/.ssh>ls -l authorized_keys
> > -rw-rw-r--    1 user     user          988 Jan  4 12:16 authorized_keys
> 
> > There is nothing "bad" about that file mode.

in sshd's view it's "bad" since openssh does not know
how many users belong to the group.

authorized_keys should not be group writeable.

however, you can turn off StrictModes in sshd_config,
but this is a bad idea.





More information about the openssh-unix-dev mailing list