- mcbride@cvs.openbsd.org 2008/02/09 12:15:43

     [ssh.1 sshd.8]
     Document the correct permissions for the ~/.ssh/ directory.
     ok jmc

diff --git a/ChangeLog b/ChangeLog
index d31b8ef73a28c19ea26b2d1d1a4abd1985c9af11..0874ab3b95f8734aae3df14d2c4b7787ded473c7 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -71,6 +71,10 @@
    - markus@cvs.openbsd.org 2008/02/04 21:53:00
      [session.c sftp-server.c sftp.h]
      link sftp-server into sshd; feedback and ok djm@
    - markus@cvs.openbsd.org 2008/02/04 21:53:00
      [session.c sftp-server.c sftp.h]
      link sftp-server into sshd; feedback and ok djm@

+   - mcbride@cvs.openbsd.org 2008/02/09 12:15:43
+     [ssh.1 sshd.8]
+     Document the correct permissions for the ~/.ssh/ directory.
+     ok jmc

 
 20080119
  - (djm) Silence noice from expr in ssh-copy-id; patch from
 
 20080119
  - (djm) Silence noice from expr in ssh-copy-id; patch from

diff --git a/ssh.1 b/ssh.1
index 0eb097ddddc2672b2bfd08c2acb43c531cc9ee1f..857c58e0bd075470bb11439a022c70b0eaf1958c 100644 (file)
--- a/ssh.1
+++ b/ssh.1
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"

-.\" $OpenBSD: ssh.1,v 1.271 2008/01/19 19:13:28 djm Exp $
+.\" $OpenBSD: ssh.1,v 1.272 2008/02/09 12:15:43 mcbride Exp $

 .Dd $Mdocdate$
 .Dt SSH 1
 .Os
 .Dd $Mdocdate$
 .Dt SSH 1
 .Os


@@ -1245,6 +1245,13 @@ This file is used in exactly the same way as
 but allows host-based authentication without permitting login with
 rlogin/rsh.
 .Pp
 but allows host-based authentication without permitting login with
 rlogin/rsh.
 .Pp

+.It ~/.ssh/
+This directory is the default location for all user-specific configuration
+and authentication information.
+There is no general requirement to keep the entire contents of this directory
+secret, but the recommended permissions are read/write/execute for the user,
+and not accessible by others.
+.Pp

 .It ~/.ssh/authorized_keys
 Lists the public keys (RSA/DSA) that can be used for logging in as this user.
 The format of this file is described in the
 .It ~/.ssh/authorized_keys
 Lists the public keys (RSA/DSA) that can be used for logging in as this user.
 The format of this file is described in the

diff --git a/sshd.8 b/sshd.8
index 419394329838e0b43dae326962e49c7e190e188a..18ada40c794c966322b98be41a89837157b7b5f2 100644 (file)
--- a/sshd.8
+++ b/sshd.8
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"

-.\" $OpenBSD: sshd.8,v 1.237 2007/06/07 19:37:34 pvalchev Exp $
+.\" $OpenBSD: sshd.8,v 1.238 2008/02/09 12:15:43 mcbride Exp $

 .Dd $Mdocdate$
 .Dt SSHD 8
 .Os
 .Dd $Mdocdate$
 .Dt SSHD 8
 .Os


@@ -682,6 +682,13 @@ This file is used in exactly the same way as
 but allows host-based authentication without permitting login with
 rlogin/rsh.
 .Pp
 but allows host-based authentication without permitting login with
 rlogin/rsh.
 .Pp

+.It ~/.ssh/
+This directory is the default location for all user-specific configuration
+and authentication information.
+There is no general requirement to keep the entire contents of this directory
+secret, but the recommended permissions are read/write/execute for the user,
+and not accessible by others.
+.Pp

 .It ~/.ssh/authorized_keys
 Lists the public keys (RSA/DSA) that can be used for logging in as this user.
 The format of this file is described above.
 .It ~/.ssh/authorized_keys
 Lists the public keys (RSA/DSA) that can be used for logging in as this user.
 The format of this file is described above.