Re: can't change a file's permissions + some ssh

[Corinna Vinschen <corinna-cygwin at cygwin dot com>]

On Jun  7 17:46, Marilo wrote:
> after some fiddling with ssh.. removing the service, removing keys, re-running ssh-host-config, I got this error 
> 
> harvey@samsung350 ~ 
> $ tail /var/log/sshd.log 
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
> @         WARNING: UNPROTECTED PRIVATE KEY FILE!          @ 
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
> Permissions 0670 for '/etc/ssh_host_ed25519_key' are too open. 
> It is required that your private key files are NOT accessible by others. 
> This private key will be ignored. 
> bad permissions: ignore key: /etc/ssh_host_ed25519_key 
> Could not load host key: /etc/ssh_host_ed25519_key 
> Disabling protocol version 2. Could not load host key 
> sshd: no hostkeys available -- exiting.
> 
> 
> So I tried changing the file's permissions but I can't seem to change them
> 
> harvey@samsung350 ~ 
> $ ls -l /etc/ssh_host_ed25519_key 
> -rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 
> 
> harvey@samsung350 ~ 
> $ chmod 600 /etc/ssh_* 
> 
> harvey@samsung350 ~ 
> $ ls -l /etc/ssh_host_ed25519_key 
> -rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 

Note the extra permissions indicated by the trailing '+'.  Try
`setfacl -b /etc/ssh_host_ed25519_key'.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

Attachment: pgp9hol71_S3c.pgp
Description: PGP signature