OpenSSH: restrict file permissions for sshd_config to 0600

This file does not have to be readable by anybody else than the user
running an OpenSSH server. While it does not really contain confidential
information, exposing it to the rest of the world makes no sense either.

This will silence a Lynis warning. :-)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/lfs/openssh b/lfs/openssh
index 3117e996c95aaded3f112738b87aca623a718a94..ced1a7db97039f5d2c5a9bf7b80fbb922b4f58e9 100644 (file)
--- a/lfs/openssh
+++ b/lfs/openssh
@@ -84,7 +84,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        cd $(DIR_APP) && make install
 
        # install custom OpenSSH server configuration
-       install -v -m 644 $(DIR_SRC)/config/ssh/sshd_config \
+       install -v -m 600 $(DIR_SRC)/config/ssh/sshd_config \
                /etc/ssh/sshd_config
 
        # install custom OpenSSH client configuration