diff options
author | Yann E. MORIN <yann.morin.1998@free.fr> | 2013-06-23 00:22:32 +0200 |
---|---|---|
committer | Peter Korsgaard <jacmet@sunsite.dk> | 2013-06-23 21:51:57 +0200 |
commit | 2f2bf6a800d585ea381e09eec148844a7135ac53 (patch) | |
tree | 4c81d59adc618b0e0ef124d1f315c185e6a3c642 | |
parent | c3cf32ebf55c203ec4d3fcd566ca64bf173b9079 (diff) | |
download | buildroot-novena-2f2bf6a800d585ea381e09eec148844a7135ac53.tar.gz buildroot-novena-2f2bf6a800d585ea381e09eec148844a7135ac53.zip |
system/permissions: make /root group+others non-writable
Upon logging, dropbear whines if /root is group- or others-writable, and
key-based authentication is attempted, reverting to password-based
authentication:
dropbear[149]: /root must be owned by user or root, and not writable by others
dropbear[149]: Password auth succeeded for 'root' from 192.168.127.35:41566
On my system, /root was 770. Changing to 700 fixed the issue.
Having /root 700 is a good idea, anyway.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
-rw-r--r-- | system/device_table.txt | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/system/device_table.txt b/system/device_table.txt index 43c0cfa0b..7ae4b071b 100644 --- a/system/device_table.txt +++ b/system/device_table.txt @@ -9,6 +9,7 @@ /dev d 755 0 0 - - - - - /tmp d 1777 0 0 - - - - - /etc d 755 0 0 - - - - - +/root d 700 0 0 - - - - - /home/default d 755 1000 1000 - - - - - /var/www d 755 33 33 - - - - - /etc/shadow f 600 0 0 - - - - - |