| Summary: | error message in key_perm_ok should be firmer | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Portable OpenSSH | Reporter: | Colin Watson <cjwatson> | ||||
| Component: | ssh | Assignee: | Assigned to nobody <unassigned-bugs> | ||||
| Status: | CLOSED FIXED | ||||||
| Severity: | minor | CC: | djm, jjelen | ||||
| Priority: | P2 | ||||||
| Version: | 5.8p1 | ||||||
| Hardware: | All | ||||||
| OS: | All | ||||||
| URL: | https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/663455 | ||||||
| Bug Depends on: | |||||||
| Bug Blocks: | 1845 | ||||||
| Attachments: |
|
||||||
patch applied - thanks close resolved bugs now that openssh-5.9 has been released This issue was reintroduced with commit: https://anongit.mindrot.org/openssh.git/commit/?id=8668706d0f52654fe64c0ca41a96113aeab8d2b8 without any comments or notes. This is regression brought here by refactoring and affecting 6.7 and 6.8 release. Created attachment 2576 [details]
upstream patch
fixed, again Set all RESOLVED bugs to CLOSED with release of OpenSSH 7.1 |
David Lublink reported the following as an Ubuntu bug: int key_perm_ok(int fd, const char *filename) { [...] error("Permissions 0%3.3o for '%s' are too open.", (u_int)st.st_mode & 0777, filename); error("It is recommended that your private key files are NOT accessible by others."); error("This private key will be ignored."); return 0; } return 1; } The text "It is recommended that your private key files are NOT accessible by others." should read "It is not permitted....". There is no workaround to use a non-protected private key, therefore it is incorrect to say "recommended".