system/permissions: make /root group+others non-writable
PATCH 1/1 system/permissions: make /root group+others non-writable
From: "Yann E. MORIN" <[email protected]>
Upon logging, dropbear whines if /root is group- or others-writable, and key-based authentication is attempted, reverting to password-based authentication:
dropbear[149]: /root must be owned by user or root, and not writable by others dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566
On my system, /root was 770. Changing to 700 fixed the issue.
Having /root 700 is a good idea, anyway.
--- system/device_table.txt | 1 + 1 file changed, 1 insertion(+)
system/device_table.txt +1 -0
@@ -9,6 +9,7 @@ /dev d 755 0 0 - - - - - /tmp d 1777 0 0 - - - - - /etc d 755 0 0 - - - - - +/root d 700 0 0 - - - - - /home/default d 755 1000 1000 - - - - - /var/www d 755 33 33 - - - - - /etc/shadow f 600 0 0 - - - - -
Signature · 1 line
1.8.1.2
PATCH 1/1 system/permissions: make /root group+others non-writable
Dear Yann E. MORIN,
Quoted 8 lines · Yann E. MORIN
From: "Yann E. MORIN" <[email protected]>
Upon logging, dropbear whines if /root is group- or others-writable, and key-based authentication is attempted, reverting to password-based authentication:
dropbear[149]: /root must be owned by user or root, and not writable by others dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566
Quoted 5 lines
On my system, /root was 770. Changing to 700 fixed the issue.
Having /root 700 is a good idea, anyway.
Signed-off-by "Yann E. MORIN" <[email protected]>
Signature · 4 lines
Thomas Petazzoni, Free Electrons Kernel, drivers, real-time and embedded Linux development, consulting, training and support. http://free-electrons.com
PATCH 1/1 system/permissions: make /root group+others non-writable
In reply to Yann E. MORINQuoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
"Yann" == Yann E MORIN <[email protected]> writes:
Yann> From: "Yann E. MORIN" <[email protected]>
Yann> Upon logging, dropbear whines if /root is group- or others-writable, and Yann> key-based authentication is attempted, reverting to password-based Yann> authentication:
Yann> dropbear[149]: /root must be owned by user or root, and not writable by others
Yann> dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566
Yann> On my system, /root was 770. Changing to 700 fixed the issue.
Yann> Having /root 700 is a good idea, anyway.
Committed, thanks.
Signature · 1 line
Bye, Peter Korsgaard