Djam/openssh
1
0
Fork 0
mirror of https://abf.rosa.ru/djam/openssh.git synced 2025-02-24 02:02:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix host keys permissions on existing installations

Browse source
This commit is contained in:
Mikhail Novosyolov 2018-11-19 01:58:47 +03:00
parent 3f824adc9e
commit 725d8454a2
1 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
openssh.spec
View file

@ -20,7 +20,7 @@
Summary: OpenSSH free Secure Shell (SSH) implementation
Name: openssh
Version: 7.9p1
Release: 4
Release: 5
License: BSD
Group: Networking/Remote access
Url: http://www.openssh.com/
@ -208,6 +208,18 @@ your host.
%post server
#!/bin/sh
# ssh-keygen in ROSA's openssh < 7.9p1 made 640 permissions and OpenSSH server did not start, fix it on exisiting installations
# we check for '= 640', but '!= 600' to keep custom user modifications
for i in rsa dsa ecdsa ed25519
do
key_file="/etc/ssh/ssh_host_${i}_key"
[ -f "$key_file" ] && [ "$(stat -c "%a" "$key_file")" = '640' ] && \
chmod 600 "$key_file" && \
FIXED_PERM='1' && \
echo "Permissions of SSH host key ${key_file} we incorrect, changed to 600"
done
# restarting sshd may break ssh connection, but it did not work with incorrect host keys permissions, so restart it
[ "$FIXED_PERM" = '1' ] && ( set -x; systemctl restart sshd.service && set +x && echo "OpenSSH server restarted!" )
%systemd_post sshd.service sshd.socket
# Don't run sshd-keygen.service here, because otherwise all ISO images will have the same host keys
# sshd-keygen.service is ran as a part of sshd.service