Re: How to Restart the service sshd in Fedora Linux System ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



jdow wrote:
> Directory /etc/ssh - should be drwxr-xr-x. The world must have the
> rights to read and enter the directory but not write to it.
>
> Most of the files should be -rw-------. Only root can read or write
> them. None should have x permission. And ssh_config and the .pub
> files should be -rw-r--r--.
>
> Nobody but root should be able to write to that directory under any
> circumstance or your system is open to exploitation.
>
> Each user ~/.ssh directory should be drwxr-xr-x. Each file should be
> -rw-r--r--. (This is probably wrong. The directory probably should be
> drwx------ and the files should be -rw-------. But under RedHat and
> Fedora home directories are drwx------, so people who do not belong
> can't get to the directory in the first place.
Yes, your second statement is "more" correct.  The ~/.ssh directory
should be drwx------.

While, as you point out, it won't make a difference in cases where one
doesn't alter the defaults of user creation.  In cases where you assign
groups or add users to various groups it could become a factor.  So as
not to tax ones memory I feel it is good practice to advise drwx------.



Attachment: signature.asc
Description: OpenPGP digital signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux