system/permissions: make /root group+others non-writable
authorYann E. MORIN <yann.morin.1998@free.fr>
Sat, 22 Jun 2013 22:22:32 +0000 (00:22 +0200)
committerPeter Korsgaard <jacmet@sunsite.dk>
Sun, 23 Jun 2013 19:51:57 +0000 (21:51 +0200)
Upon logging, dropbear whines if /root is group- or others-writable, and
key-based authentication is attempted, reverting to password-based
authentication:
    dropbear[149]: /root must be owned by user or root, and not writable by others
    dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566

On my system, /root was 770. Changing to 700 fixed the issue.

Having /root 700 is a good idea, anyway.

Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
system/device_table.txt

index 43c0cfa0b4f363df9190645be6c9e545d34e84a3..7ae4b071b9c6fb820f89b44d021a61412fffde42 100644 (file)
@@ -9,6 +9,7 @@
 /dev                                   d       755     0       0       -       -       -       -       -
 /tmp                                   d       1777    0       0       -       -       -       -       -
 /etc                                   d       755     0       0       -       -       -       -       -
+/root                                  d       700     0       0       -       -       -       -       -
 /home/default                          d       755     1000    1000    -       -       -       -       -
 /var/www                               d       755     33      33      -       -       -       -       -
 /etc/shadow                            f       600     0       0       -       -       -       -       -