[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security of Debian SuX0r?



On Sat, Sep 02, 2000 at 01:25:09AM -0400, Adam McKenna wrote:
> > 
> > my home directory is mode 710 and ssh works fine, on other systems my
> > home is mode 755 and ssh still works fine (all with RSA auth and
> > StrictModes yes)
> 
> Actually, sshd only cares about ~/.ssh and ~/.ssh/authorized_keys and that
> they're not group or world writable.

how much do you want to bet?

[eb@socrates eb]$ chmod 770 .
[eb@socrates eb]$ ls -ld ~
drwxrwx---   56 eb       users        4096 Sep  1 23:04 /home/eb
[eb@socrates eb]$

[eb@plato eb]$ ssh -v socrates
SSH Version OpenSSH-1.2.3, protocol version 1.5.
Compiled with SSL.
debug: Reading configuration data /home/eb/.ssh/config
[snip]
debug: Connection established.
debug: Remote protocol version 1.5, remote software version OpenSSH-1.2.3
[snip]
debug: Trying RSA authentication with key 'eb@plato'
debug: Remote: RSA authentication refused for eb: bad ownership or
modes for '/home/eb/'.
debug: Server refused our key.
debug: Trying RSA authentication with key 'eb@plato'
debug: Remote: RSA authentication refused for eb: bad ownership or
modes for '/home/eb/'.
debug: Server refused our key.
Permission denied.
debug: Calling cleanup 0x8056820(0x0)
[eb@plato eb]$

[eb@socrates eb]$ chmod 710 .
[eb@socrates eb]$ ls -ld .
drwx--x---   56 eb       users        4096 Sep  1 23:10 .
[eb@socrates eb]$

[eb@plato eb]$ ssh socrates
Enter passphrase for RSA key 'eb@plato':
Last login: Fri Sep  1 19:09:40 2000 on tty9
[...]
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
You have mail.
[eb@socrates eb]$

i also tried it with my home directory group set to my private group
`eb' same deal.

perhaps you have a different version of ssh?

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

Attachment: pgpGlsFAu5rAd.pgp
Description: PGP signature


Reply to: