Bug#119886: openssh-server: Encountered this problem with backup-manager

[Colin Watson <cjwatson@debian.org>]

Source: openssh
Source-Version: 1:5.5p1-4

On Tue, Jan 01, 2008 at 02:19:05AM -0800, Josh Triplett wrote:
> I ran into the same problem when trying to use backup-manager with ssh
> uploads.  I created a user "backup-manager" on the system I want to
> upload the backups to, and since I already had to give that user
> permission to /var/archives, I made /var/archives its home directory.
> However, backup-manager defaults to 0660 permissions on /var/archives,
> making ssh refuse to use /var/archives/.ssh/authorized_keys .
> 
> It would require a bit more work, but I think the *right* solution
> here would involve asking if the group which has write permission to
> the directory contains any users other than the SSH target user.

I just came across this when doing a pass over old bug reports.  Indeed,
that's the right answer, and I implemented it in openssh 1:5.5p1-4 in
response to #581919 (on top of an earlier fix to #314347).  That fixed
this bug too.

Thanks,

-- 
Colin Watson                                       [cjwatson@debian.org]