Re: allow selective RSA AUTH in sshd setup?

From: David Kirchner (davidk@accretivetg.com)
Date: 09/10/01 

Date: Mon, 10 Sep 2001 10:15:00 -0700 (PDT)
From: David Kirchner <davidk@accretivetg.com>
To: David Taylor <davidt@yadt.co.uk>

On Mon, 10 Sep 2001, David Taylor wrote:

> Easy enough
>
> # mkdir ~user/.ssh
> # touch ~user/.ssh/{authorized_keys,config,random,etc,etc,etc}
> # chown root:usersprivategroup ~user/.ssh
> # chmod 750 ~user/.ssh
> # chown user:usersprivategroup ~user/.ssh/*
> # chmod 640 ~user/.ssh/*
> # chown root:usersprivategroup ~user/.ssh/authorized_keys
>
> SSH even seems happy to have a root-owned authorized_keys file...

And then chflags schg .ssh so the user can't rename and re-create the .ssh
directory.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages
Quantcast