Commit 2f2bf6a8 authored Jun 23, 2013 by Yann E. MORIN Committed by Peter Korsgaard Jun 23, 2013

system/permissions: make /root group+others non-writable



Upon logging, dropbear whines if /root is group- or others-writable, and
key-based authentication is attempted, reverting to password-based
authentication:
    dropbear[149]: /root must be owned by user or root, and not writable by others
    dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566

On my system, /root was 770. Changing to 700 fixed the issue.

Having /root 700 is a good idea, anyway.

Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>

parent c3cf32eb

system/device_table.txt

+1 −0

Original line number	Diff line number	Diff line
		@@ -9,6 +9,7 @@
		/dev d 755 0 0 - - - - -
		/tmp d 1777 0 0 - - - - -
		/etc d 755 0 0 - - - - -
		/root d 700 0 0 - - - - -
		/home/default d 755 1000 1000 - - - - -
		/var/www d 755 33 33 - - - - -
		/etc/shadow f 600 0 0 - - - - -