summaryrefslogtreecommitdiff
path: root/ssh_config.5
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:09:58 +0000
committerColin Watson <cjwatson@debian.org>2017-03-29 01:39:47 +0100
commit0b9c0482cbff9ce16384e4247d955676d4d77df3 (patch)
treedcaaa33c770f1520a423e31d287ef10d827acc1b /ssh_config.5
parent980646a9f7f03b43b678272b2a56e30906c6ddec (diff)
Allow harmless group-writability
Allow secure files (~/.ssh/config, ~/.ssh/authorized_keys, etc.) to be group-writable, provided that the group in question contains only the file's owner. Rejected upstream for IMO incorrect reasons (e.g. a misunderstanding about the contents of gr->gr_mem). Given that per-user groups and umask 002 are the default setup in Debian (for good reasons - this makes operating in setgid directories with other groups much easier), we need to permit this by default. Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1060 Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=314347 Last-Update: 2013-09-14 Patch-Name: user-group-modes.patch
Diffstat (limited to 'ssh_config.5')
-rw-r--r--ssh_config.52
1 files changed, 2 insertions, 0 deletions
diff --git a/ssh_config.5 b/ssh_config.5
index e4eaa5ae0..a04e5757b 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -1827,6 +1827,8 @@ The format of this file is described above.
1827This file is used by the SSH client. 1827This file is used by the SSH client.
1828Because of the potential for abuse, this file must have strict permissions: 1828Because of the potential for abuse, this file must have strict permissions:
1829read/write for the user, and not accessible by others. 1829read/write for the user, and not accessible by others.
1830It may be group-writable provided that the group in question contains only
1831the user.
1830.It Pa /etc/ssh/ssh_config 1832.It Pa /etc/ssh/ssh_config
1831Systemwide configuration file. 1833Systemwide configuration file.
1832This file provides defaults for those 1834This file provides defaults for those