Bug 1909 - "WARNING: UNPROTECTED PRIVATE KEY FILE!" warning needs an actionable step
Summary: "WARNING: UNPROTECTED PRIVATE KEY FILE!" warning needs an actionable step
Status: CLOSED WONTFIX
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: ssh (show other bugs)
Version: -current
Hardware: All All
: P2 trivial
Assignee: Assigned to nobody
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-05-26 14:22 AEST by zhitomirskiyi
Modified: 2015-08-11 23:03 AEST (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description zhitomirskiyi 2011-05-26 14:22:23 AEST 
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0644 for '........./.ssh/id_rsa' are too open.
It is recommended that your private key files are NOT accessible by others.
This private key will be ignored.
bad permissions: ignore key: ...../.ssh/id_rsa
Permission denied (publickey).


This needs to say something along the lines of we recommend changing the permissions of ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub to 600
Comment 1 Damien Miller 2015-04-17 23:33:30 AEST 
The wording is a little stronger now, but it contains all the information needed.
Comment 2 Damien Miller 2015-08-11 23:03:43 AEST 
Set all RESOLVED bugs to CLOSED with release of OpenSSH 7.1