Bug 905108

Summary: deployment guide: permission for ~/.ssh/authorized_keys is too permissive
Product: Red Hat Enterprise Linux 6 Reporter: Yaniv Kaul <ykaul>
Component: doc-Deployment_GuideAssignee: Jaromir Hradilek <jhradile>
Status: CLOSED CURRENTRELEASE QA Contact: ecs-bugs
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.4CC: jkt
Target Milestone: rcKeywords: Documentation
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-25 13:16:31 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Yaniv Kaul 2013-01-28 15:40:19 UTC
Description of problem:
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/s2-ssh-configuration-keypairs.html

mentions:
chmod 644 ~/.ssh/authorized_keys

That's not very secure, and http://www.openssh.org/faq.html#3.14 recommends otherwise.
For me, on 6.3.z, the following works nicely:
[root@rhevm-3 ~]# ls -l ~/.ssh/authorized_keys 
-rw-------. 1 root root 408 2013-01-28 17:26 /root/.ssh/authorized_keys



Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info: