Skip to content

Fix home permissions modified by ssh module

Emanuele Giuseppe Esposito requested to merge eesposit/cloud-init-centos-:ssh-home-bp into c9s 
BZ: 1995843
TESTED: By me and QA
BREW: 39178085

In upstream PR #956 and BZ 1862967, we updated the file and directory permissions for keys not in
the user's home directory. We also unintentionally modified the
owner within the home directory as well to root, but only when the file/folders specified in AuthorizedKeysFile don't exist. This is okay and still allows ssh login, but not ideal for other ssh components. For example, if cloud-init creates the .ssh folder in /home/user/, the owner of .ssh will be root and ssh-keygen won't allow to create ssh keys in that folder.

Fix home permissions modified by ssh module (SC-338) (#984)

commit 7d3f5d750f6111c2716143364ea33486df67c927
Author: James Falcon <therealfalcon@gmail.com>
Date:   Fri Aug 20 17:09:49 2021 -0500

    Fix home permissions modified by ssh module (SC-338) (#984)

    Fix home permissions modified by ssh module

    In #956, we updated the file and directory permissions for keys not in
    the user's home directory. We also unintentionally modified the
    permissions within the home directory as well. These should not change,
    and this commit changes that back.

    LP: #1940233

Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>

Merge request reports