]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
openssh: limit read access to sshd_config agodard/master-next-2 agodard/master-next-success
authorLouis Rannou <louis.rannou@non.se.com>
Thu, 3 Jul 2025 12:14:36 +0000 (14:14 +0200)
committerAntonin Godard <antonin.godard@bootlin.com>
Thu, 3 Jul 2025 13:24:05 +0000 (15:24 +0200)
commit3a10d87bbd31c40d4a23dba9dfec21fc1e0dc5c5
tree1738bbd8d6cdc9c06cedfb9452eb3000056529cf
parentd9658fc14a71f51e58cda782137d2e66f7d479ad
openssh: limit read access to sshd_config

Enhance security by limiting read access for /etc/sshd_config to user root as it
may reveal unsecure configurations.

Reading access is limited in the install append as the default value 0644 is
hardcoded in the openssh makefile and is not configurable. Therefore the
permissions are modified in the install append.

Signed-off-by: Louis Rannou <louis.rannou@non.se.com>
Signed-off-by: Antonin Godard <antonin.godard@bootlin.com>
meta/recipes-connectivity/openssh/openssh_10.0p1.bb