Just discovered the folder /home/username/.ssh permission set as 755, and the authorized_keys file inside set as 644 the file is: from=“127.0.0.1”,command=“internal-sftp”,restrict ssh-rsa XXXXXXXXXXXXXXX filemanager.ssh.key Is this normal behavior? will it cause security concern?

[image] Risky permisson via File Manager I forgot to mention that 755 should not be used for .ssh but to use 700, the script v-add-user-sftp-key must be modified to set a new acl: sed -i.ori -e '/^AUTHKEY_FILE=.*authorized_keys/a SSH_DIR="$HOMEDIR/$user/.ssh"…

I think this open PR managed that: fix(filemanager): avoid blocked sudo chmod and grant .ssh traversal for hestiaweb (#5242) main ← amongiardo:fix/filemanager-sftp-key-traversal opened 10:48PM - 06 …

is this a security bug about that file and folder permission

Thanks, I’ve changed these 2 files. So I need to manually set .ssh/ folder to 700, and authorized_keys file inside to 600?

Yes, those are the recommended permissions.

Permission for .ssh folder in home/user/.ssh/

Community Support

sahsanu May 29, 2026, 1:25am 4