ssh: doesn't live well with user-group system

Christian Kurz shorty at debian.org
Fri Dec 29 00:41:48 EST 2000


On 00-12-28 Markus Friedl wrote:
> On Thu, Dec 28, 2000 at 02:23:49PM +0100, Christian Kurz wrote:
> > > user at host:~/.ssh>ls -l authorized_keys
> > > -rw-rw-r--    1 user     user          988 Jan  4 12:16 authorized_keys
> > 
> > > There is nothing "bad" about that file mode.

> in sshd's view it's "bad" since openssh does not know
> how many users belong to the group.

> authorized_keys should not be group writeable.

> however, you can turn off StrictModes in sshd_config,
> but this is a bad idea.

Thank you, so I have now some explanation that I can use to close this
bug. 

Ciao
     Christian
-- 
          Debian Developer and Quality Assurance Team Member
    1024/26CC7853 31E6 A8CA 68FC 284F 7D16  63EC A9E6 67FF 26CC 7853





More information about the openssh-unix-dev mailing list