Hello community, here is the log from the commit of package permissions checked in at Tue Jul 15 23:10:50 CEST 2008. -------- --- permissions/permissions.changes 2008-07-03 11:33:49.000000000 +0200 +++ permissions/permissions.changes 2008-07-15 11:40:33.000000000 +0200 @@ -1,0 +2,6 @@ +Tue Jul 15 11:40:22 CEST 2008 - lnussel@suse.de + +- ensure correct permissions on ssh files to avoid sshd refusing + logins (bnc#398250) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ permissions.spec ++++++ --- /var/tmp/diff_new_pack.d24508/_old 2008-07-15 23:06:37.000000000 +0200 +++ /var/tmp/diff_new_pack.d24508/_new 2008-07-15 23:06:37.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package permissions (Version 2008.7.8) +# spec file for package permissions (Version 2008.7.15) # # Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -15,7 +15,7 @@ License: GPL v2 or later Group: Productivity/Security AutoReqProv: on -Version: 2008.7.8 +Version: 2008.7.15 Release: 1 Provides: aaa_base:/etc/permissions Requires: /sbin/SuSEconfig @@ -84,6 +84,9 @@ /var/adm/fillup-templates/sysconfig.security %changelog +* Tue Jul 15 2008 lnussel@suse.de +- ensure correct permissions on ssh files to avoid sshd refusing + logins (bnc#398250) * Thu Jul 03 2008 lnussel@suse.de - adapt permissions of lppasswd for current cups setup (bnc#406058) * Mon Jun 02 2008 lnussel@suse.de ++++++ permissions ++++++ --- permissions/permissions 2008-04-21 16:03:19.000000000 +0200 +++ permissions/permissions 2008-07-15 11:40:08.000000000 +0200 @@ -150,10 +150,14 @@ # utempter /usr/sbin/utempter root:tty 2755 -# changing the global ssh client configuration makes it unreadable -# and therefore useless. Keep in mind that users can bring their own client! +# ensure correct permissions on ssh files to avoid sshd refusing +# logins (bnc#398250) /etc/ssh/ssh_host_key root:root 600 /etc/ssh/ssh_host_key.pub root:root 644 +/etc/ssh/ssh_host_dsa_key root:root 600 +/etc/ssh/ssh_host_dsa_key.pub root:root 644 +/etc/ssh/ssh_host_rsa_key root:root 600 +/etc/ssh/ssh_host_rsa_key.pub root:root 644 /etc/ssh/ssh_config root:root 644 /etc/ssh/sshd_config root:root 640 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org