Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Blog | Linux Links | Bling | About BLU

BLU Discuss list archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SSH authentication

 On Thu, 3 Jan 2008, Derek Martin wrote: 

> My second guess would be that the permissions of your home directory 
> itself have been changed to allow group or other to write there.  This 
> would allow someone to remove your .ssh directory and replace it with 
> a new copy with whatever authorized_keys file the attacker wants, so 
> by default it's not allowed.  You mentioned .ssh and authorized_keys 
> are secured, but didn't mention about your home directory. 

That's what I was thinking as well, but that would cause key based auth 
to fail from ALL sources, not just a subset of them. 

This message has been scanned for viruses and 
dangerous content by MailScanner, and is 
believed to be clean. 

Discuss mailing list 
[hidden email]

BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!

Boston Linux & Unix /