openssh bugs - Mar 2013 - [Bug 2078] New: Documentation claims ~.ssh/config must not be accessible by others when actually it must not be readable

https://bugzilla.mindrot.org/show_bug.cgi?id=2078

            Bug ID: 2078
           Summary: Documentation claims ~.ssh/config must not be
                    accessible by others when actually it must not be
                    readable
    Classification: Unclassified
           Product: Portable OpenSSH
           Version: 5.9p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: minor
          Priority: P5
         Component: Documentation
          Assignee: unassigned-bugs at mindrot.org
          Reporter: paulg at chiark.greenend.org.uk

The ssh man page claims

~/.ssh/config
This is the per-user configuration file.  The file format and
configuration options are described in ssh_config(5).  Because of
the potential for abuse, this file must have strict permissions:
read/write for the user, and not accessible by others.

However in fact this file must only not be writeable by others and this
is what ssh checks for.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2078

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED
             Blocks|                            |2076

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
-read/write for the user, and not accessible by others.
+read/write for the user, and not writable by others.

committed and will be in openssh-6.3

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2078

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Set all RESOLVED bugs to CLOSED with release of OpenSSH 7.1

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.