summaryrefslogtreecommitdiff
path: root/ssh.1
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:09:58 +0000
committerColin Watson <cjwatson@debian.org>2015-08-19 16:33:32 +0100
commit39b2121148a0aa016a648446823c8f02c5fd95b3 (patch)
tree83af2a05a97d6e3a8a7b566646bc97f7689340d6 /ssh.1
parent8b3111d597316954caaf8ddf2e7746491976c248 (diff)
Allow harmless group-writability
Allow secure files (~/.ssh/config, ~/.ssh/authorized_keys, etc.) to be group-writable, provided that the group in question contains only the file's owner. Rejected upstream for IMO incorrect reasons (e.g. a misunderstanding about the contents of gr->gr_mem). Given that per-user groups and umask 002 are the default setup in Debian (for good reasons - this makes operating in setgid directories with other groups much easier), we need to permit this by default. Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1060 Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=314347 Last-Update: 2013-09-14 Patch-Name: user-group-modes.patch
Diffstat (limited to 'ssh.1')
-rw-r--r--ssh.12
1 files changed, 2 insertions, 0 deletions
diff --git a/ssh.1 b/ssh.1
index da64b7198..53c711a3c 100644
--- a/ssh.1
+++ b/ssh.1
@@ -1355,6 +1355,8 @@ The file format and configuration options are described in
1355.Xr ssh_config 5 . 1355.Xr ssh_config 5 .
1356Because of the potential for abuse, this file must have strict permissions: 1356Because of the potential for abuse, this file must have strict permissions:
1357read/write for the user, and not writable by others. 1357read/write for the user, and not writable by others.
1358It may be group-writable provided that the group in question contains only
1359the user.
1358.Pp 1360.Pp
1359.It Pa ~/.ssh/environment 1361.It Pa ~/.ssh/environment
1360Contains additional definitions for environment variables; see 1362Contains additional definitions for environment variables; see