summaryrefslogtreecommitdiff
path: root/ssh.1
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:09:58 +0000
committerColin Watson <cjwatson@debian.org>2014-02-10 02:40:16 +0000
commitb63620615d5c8af09e350608233f69191ad6c275 (patch)
tree6123216785c35d73925aaec0d3c2e3f366edc2b9 /ssh.1
parentefe70e315cfcc70e765ebd070e83528a6be6c125 (diff)
Allow harmless group-writability
Allow secure files (~/.ssh/config, ~/.ssh/authorized_keys, etc.) to be group-writable, provided that the group in question contains only the file's owner. Rejected upstream for IMO incorrect reasons (e.g. a misunderstanding about the contents of gr->gr_mem). Given that per-user groups and umask 002 are the default setup in Debian (for good reasons - this makes operating in setgid directories with other groups much easier), we need to permit this by default. Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1060 Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=314347 Last-Update: 2013-09-14 Patch-Name: user-group-modes.patch
Diffstat (limited to 'ssh.1')
-rw-r--r--ssh.12
1 files changed, 2 insertions, 0 deletions
diff --git a/ssh.1 b/ssh.1
index 27794e2d0..ff5e6acab 100644
--- a/ssh.1
+++ b/ssh.1
@@ -1352,6 +1352,8 @@ The file format and configuration options are described in
1352.Xr ssh_config 5 . 1352.Xr ssh_config 5 .
1353Because of the potential for abuse, this file must have strict permissions: 1353Because of the potential for abuse, this file must have strict permissions:
1354read/write for the user, and not writable by others. 1354read/write for the user, and not writable by others.
1355It may be group-writable provided that the group in question contains only
1356the user.
1355.Pp 1357.Pp
1356.It Pa ~/.ssh/environment 1358.It Pa ~/.ssh/environment
1357Contains additional definitions for environment variables; see 1359Contains additional definitions for environment variables; see