Permission for .ssh folder in home/user/.ssh/

[jasonwch]

Just discovered the folder /home/username/.ssh permission set as 755, and the authorized_keys file inside set as 644

the file is:

from=“127.0.0.1”,command=“internal-sftp”,restrict ssh-rsa 

XXXXXXXXXXXXXXX

filemanager.ssh.key

Is this normal behavior? will it cause security concern?

[sahsanu]

I think this open PR managed that:

fix(filemanager): avoid blocked sudo chmod and grant .ssh traversal for hestiaweb (#5242)

[jasonwch]

is this a security bug about that file and folder permission

[sahsanu]

Risky permisson via File Manager

I forgot to mention that 755 should not be used for .ssh but to use 700, the script v-add-user-sftp-key must be modified to set a new acl: sed -i.ori -e '/^AUTHKEY_FILE=.*authorized_keys/a SSH_DIR="$HOMEDIR/$user/.ssh"' -e '/^chown "hestiaweb": "${PRVKEY_FILE}"/a \\nsetfacl -m u:hestiaweb:--x "${SSH_DIR}" > /dev/null 2>&1' /usr/local/hestia/bin/v-add-user-sftp-key If you already modified /usr/local/hestia/web/fm/configuration.php you must also edit it and remove the modification. If you didn…

[jasonwch]

Thanks, I’ve changed these 2 files. So I need to manually set .ssh/ folder to 700, and authorized_keys file inside to 600?

[sahsanu]

Yes, those are the recommended permissions.