]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
openssh: Be more restrictive on private key file permissions
authorKhem Raj <raj.khem@gmail.com>
Fri, 11 Oct 2024 19:42:51 +0000 (12:42 -0700)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 15 Oct 2024 10:47:20 +0000 (11:47 +0100)
commit5c9f456cc39ca25123249ecb32b311736bd4e1f8
tree0c742cae3368afa1bdb74cf026ee27925ac58e6a
parentf0a932dfae5439d7cee2999455edaeb1b263befc
openssh: Be more restrictive on private key file permissions

Sometimes default permissions on filesystems can be more permissive
e.g. 0644, this can make the private key file created here to inherit
those permissions and these permissions can then cause ssh server to
not allow ssh connections due to non-secure permissions on file.

Reported-by: Jean-Michel Papy <jean-michel.papy@exail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Jörg Sommer <joerg.sommer@navimatix.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-connectivity/openssh/openssh/sshd_check_keys