Re: Secondary SSH

[Jeffrey Walton]

On Sat, Aug 24, 2024 at 3:24 AM Samuel Sieb  wrote:
> On 8/23/24 3:17 PM, Dave Close wrote:
> > Jeffrey Walton wrote:
> > > At this point, I would visit each machine and:
> > >
> > > mkdir -p ~/.ssh
> > >    chown -R dclose:dclose ~/.ssh
> > >    chmod -R o-rwx ~/.ssh
> >
> > That would be guaranteed to cause failure. For example, my private keys
> > cannot have 0777 permissions!
>
> I think you're misinterpreting that command.  It *removes* all "other"
> permissions from the files.  I'm not sure what the point of it is, but
> it won't harm anything.

SSH server will refuse a connection from the user if the permissions
on the .ssh/ directory, keys or authorized_keys are too loose. See,
for example, https://stackoverflow.com/q/67000681.

Jeff