summaryrefslogtreecommitdiff
path: root/ssh.1
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:09:58 +0000
committerColin Watson <cjwatson@debian.org>2014-02-09 16:18:08 +0000
commit7016a7e8a6b854833132db253fd5e392984bd4ea (patch)
treee678b1f8ad646f806a81ca506c123ad4e106c543 /ssh.1
parentcfae2bfa1e95cbb6c7a9799f13b82e8e804ca869 (diff)
Allow harmless group-writability
Allow secure files (~/.ssh/config, ~/.ssh/authorized_keys, etc.) to be group-writable, provided that the group in question contains only the file's owner. Rejected upstream for IMO incorrect reasons (e.g. a misunderstanding about the contents of gr->gr_mem). Given that per-user groups and umask 002 are the default setup in Debian (for good reasons - this makes operating in setgid directories with other groups much easier), we need to permit this by default. Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1060 Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=314347 Last-Update: 2013-09-14 Patch-Name: user-group-modes.patch
Diffstat (limited to 'ssh.1')
-rw-r--r--ssh.12
1 files changed, 2 insertions, 0 deletions
diff --git a/ssh.1 b/ssh.1
index 66a7007d7..0b38ae188 100644
--- a/ssh.1
+++ b/ssh.1
@@ -1338,6 +1338,8 @@ The file format and configuration options are described in
1338.Xr ssh_config 5 . 1338.Xr ssh_config 5 .
1339Because of the potential for abuse, this file must have strict permissions: 1339Because of the potential for abuse, this file must have strict permissions:
1340read/write for the user, and not writable by others. 1340read/write for the user, and not writable by others.
1341It may be group-writable provided that the group in question contains only
1342the user.
1341.Pp 1343.Pp
1342.It Pa ~/.ssh/environment 1344.It Pa ~/.ssh/environment
1343Contains additional definitions for environment variables; see 1345Contains additional definitions for environment variables; see