Date: Fri, 22 Jun 2012 19:38:04 +0200 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: "Julian H. Stacey" <jhs@berklix.com> Cc: freebsd-security@freebsd.org Subject: Re: / owned by bin causes sshd to complain bad ownership Message-ID: <86mx3v2qo3.fsf@ds4.des.no> In-Reply-To: <201206221343.q5MDhmvS045187@fire.js.berklix.net> (Julian H. Stacey's message of "Fri, 22 Jun 2012 15:43:47 %2B0200") References: <201206221343.q5MDhmvS045187@fire.js.berklix.net>
next in thread | previous in thread | raw e-mail | index | archive | help
"Julian H. Stacey" <jhs@berklix.com> writes:
> On an 8.3-RELEASE running sshd, /var/log/auth.log=20
> Jun 22 12:54:06 lapr sshd[57505]: Authentication refused:
> bad ownership or modes for directory /
sshd requires that the user's authorized_keys, the directory it's in
(~/.ssh) and all its ancestor directories be owned by either the user or
root.
> Until I did
> chown 0:0 /
> ( It was previously
> drwxr-xr-x 25 bin bin 1024 Jun 20 19:53 ./
> )
I don't see why / should be owned by bin; bin is intended for system
binaries and libraries, i.e. {,/usr}/{bin,sbin,lib,libexec}, except
those that need to be setuid or setgid. The directories themselves
should probably still be owned by root:wheel.
DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86mx3v2qo3.fsf>