Skip to contentSkip to conversation

system/permissions: make /root group+others non-writable

PATCH New Yann E. MORIN 3 participants 3 messages Jun 22, 2013 – Jun 24, 2013

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 system/permissions: make /root group+others non-writable

From: "Yann E. MORIN" <[email protected]>

Upon logging, dropbear whines if /root is group- or others-writable, and key-based authentication is attempted, reverting to password-based authentication:
dropbear[149]: /root must be owned by user or root, and not writable by others dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566

On my system, /root was 770. Changing to 700 fixed the issue.

Having /root 700 is a good idea, anyway.

---
 system/device_table.txt | 1 +
 1 file changed, 1 insertion(+)
system/device_table.txt +1 -0
index 43c0cfa..7ae4b07 100644
@@ -9,6 +9,7 @@
 /dev					d	755	0	0	-	-	-	-	-
 /tmp					d	1777	0	0	-	-	-	-	-
 /etc					d	755	0	0	-	-	-	-	-
+/root					d	700	0	0	-	-	-	-	-
 /home/default				d	755	1000	1000	-	-	-	-	-
 /var/www				d	755	33	33	-	-	-	-	-
 /etc/shadow				f	600	0	0	-	-	-	-	-
Signature · 1 line
1.8.1.2
#1 lore raw

PATCH 1/1 system/permissions: make /root group+others non-writable

Dear Yann E. MORIN,

Quoted 8 lines · Yann E. MORIN

From: "Yann E. MORIN" <[email protected]>

Upon logging, dropbear whines if /root is group- or others-writable, and key-based authentication is attempted, reverting to password-based authentication:
dropbear[149]: /root must be owned by user or root, and not writable by others dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566

Quoted 5 lines

On my system, /root was 770. Changing to 700 fixed the issue.

Having /root 700 is a good idea, anyway.

Signature · 4 lines
Thomas Petazzoni, Free Electrons
Kernel, drivers, real-time and embedded Linux
development, consulting, training and support.
http://free-electrons.com
#2 lore raw

PATCH 1/1 system/permissions: make /root group+others non-writable

In reply to Yann E. MORIN
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Yann" == Yann E MORIN <[email protected]> writes:

Yann> From: "Yann E. MORIN" <[email protected]>
Yann> Upon logging, dropbear whines if /root is group- or others-writable, and Yann> key-based authentication is attempted, reverting to password-based Yann> authentication:
Yann> dropbear[149]: /root must be owned by user or root, and not writable by others
Yann> dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566

Yann> On my system, /root was 770. Changing to 700 fixed the issue.

Yann> Having /root 700 is a good idea, anyway.

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard