[Bug 663455] Re: Incorrect text found in openssh-client/auth-file.c:542

[Launchpad Bug Tracker]

** Branch linked: lp:~cjwatson/openssh/debian

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/663455

Title:
  Incorrect text found in openssh-client/auth-file.c:542

Status in Portable OpenSSH:
  Fix Released
Status in “openssh” package in Ubuntu:
  Triaged

Bug description:
  Binary package hint: metacity

  install the openssh-client source code, look at auth-file.c and see
  this stanza :

  int
  key_perm_ok(int fd, const char *filename)
  {
       struct stat st;

       if (fstat(fd, &st) < 0)
            return 0;
       /*
        * if a key owned by the user is accessed, then we check the
        * permissions of the file. if the key owned by a different user,
        * then we don't care.
        */
  #ifdef HAVE_CYGWIN
       if (check_ntsec(filename))
  #endif
       if ((st.st_uid == getuid()) && (st.st_mode & 077) != 0) {
            error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
            error("@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @");
            error("@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@");
            error("Permissions 0%3.3o for '%s' are too open.",
                (u_int)st.st_mode & 0777, filename);
            error("It is recommended that your private key files are NOT accessible by others.");
            error("This private key will be ignored.");
            return 0;
       }
       return 1;
  }

  
  The text "It is recommended that your private key files are NOT accessible by others." should read "It is not permitted....".

  There is no work around to use a non-protected private key, therefore
  it is incorrect to say recommend.

To manage notifications about this bug go to:
https://bugs.launchpad.net/openssh/+bug/663455/+subscriptions