Bug#845222: openssh-client: ssh-copy-id creates ~/.ssh with wrong permissions

[Andreas Hilboll <andreas-h@posteo.de>]

Package: openssh-client
Version: 1:7.3p1-3+b1
Severity: normal

Dear Maintainer,

I ran the command "ssh-copy-id servername" to copy my public keys to the CentOS7 server with name "servername".  Before I did this, there was no directory ~/.ssh on servername.  Afterwards, I could not login to servername with ssh keys, because the ~/.ssh directory created by the ssh-copy-id command from my Debian Testing client was created with 775 premissions, instead of the needed 700.

I believe this is a bug in the ssh-copy-id command, as if it generates the ~/.ssh directory, it should make sure that it has the correct permissions.

Cheers,
  Andreas

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openssh-client depends on:
ii  adduser           3.115
ii  dpkg              1.18.15
ii  libc6             2.24-5
ii  libedit2          3.1-20160903-1
ii  libgssapi-krb5-2  1.14.3+dfsg-2
ii  libselinux1       2.6-3
ii  libssl1.0.2       1.0.2j-1
ii  passwd            1:4.2-3.2
ii  zlib1g            1:1.2.8.dfsg-2+b3

Versions of packages openssh-client recommends:
ii  xauth  1:1.0.9-1

Versions of packages openssh-client suggests:
pn  keychain      <none>
pn  libpam-ssh    <none>
pn  monkeysphere  <none>
ii  ssh-askpass   1:1.2.4.1-9

-- no debconf information