[Bug 663455] [NEW] Incorrect text found in openssh-client/auth-file.c:542
Launchpad Bug Tracker
663455 at bugs.launchpad.net
Tue Oct 19 20:10:40 BST 2010
You have been subscribed to a public bug:
Binary package hint: metacity
install the openssh-client source code, look at auth-file.c and see this
stanza :
int
key_perm_ok(int fd, const char *filename)
{
struct stat st;
if (fstat(fd, &st) < 0)
return 0;
/*
* if a key owned by the user is accessed, then we check the
* permissions of the file. if the key owned by a different user,
* then we don't care.
*/
#ifdef HAVE_CYGWIN
if (check_ntsec(filename))
#endif
if ((st.st_uid == getuid()) && (st.st_mode & 077) != 0) {
error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
error("@ WARNING: UNPROTECTED PRIVATE KEY FILE! @");
error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
error("Permissions 0%3.3o for '%s' are too open.",
(u_int)st.st_mode & 0777, filename);
error("It is recommended that your private key files are NOT accessible by others.");
error("This private key will be ignored.");
return 0;
}
return 1;
}
The text "It is recommended that your private key files are NOT accessible by others." should read "It is not permitted....".
There is no work around to use a non-protected private key, therefore it
is incorrect to say recommend.
** Affects: openssh (Ubuntu)
Importance: Undecided
Status: New
--
Incorrect text found in openssh-client/auth-file.c:542
https://bugs.launchpad.net/bugs/663455
You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openssh in ubuntu.
More information about the Ubuntu-server-bugs
mailing list