[Bug 663455] [NEW] Incorrect text found in openssh-client/auth-file.c:542

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Sebastien Bacher (seb128):

Binary package hint: metacity

install the openssh-client source code, look at auth-file.c and see this
stanza :

int
key_perm_ok(int fd, const char *filename)
{
     struct stat st;

     if (fstat(fd, &st) < 0)
          return 0;
     /*
      * if a key owned by the user is accessed, then we check the
      * permissions of the file. if the key owned by a different user,
      * then we don't care.
      */
#ifdef HAVE_CYGWIN
     if (check_ntsec(filename))
#endif
     if ((st.st_uid == getuid()) && (st.st_mode & 077) != 0) {
          error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
          error("@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @");
          error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
          error("Permissions 0%3.3o for '%s' are too open.",
              (u_int)st.st_mode & 0777, filename);
          error("It is recommended that your private key files are NOT accessible by others.");
          error("This private key will be ignored.");
          return 0;
     }
     return 1;
}


The text "It is recommended that your private key files are NOT accessible by others." should read "It is not permitted....".

There is no work around to use a non-protected private key, therefore it
is incorrect to say recommend.

** Affects: openssh (Ubuntu)
     Importance: Low
         Status: Confirmed


** Tags: patch
-- 
Incorrect text found in openssh-client/auth-file.c:542
https://bugs.launchpad.net/bugs/663455
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is a direct subscriber.