public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
* Re: can't change a file's permissions + some ssh
@ 2015-06-10  0:43 Marilo
  0 siblings, 0 replies; 3+ messages in thread
From: Marilo @ 2015-06-10  0:43 UTC (permalink / raw)
  To: cygwin

>On Jun  7 17:46, Marilo wrote: 
>> after some fiddling with ssh.. removing the service, removing keys, re-running ssh-host-config, I got this >error 
>> 
>> harvey@samsung350 ~ 
>> $ tail /var/log/sshd.log 
>> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
>> @         WARNING: UNPROTECTED PRIVATE KEY FILE!          @ 
>> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
>> Permissions 0670 for '/etc/ssh_host_ed25519_key' are too open. 
>> It is required that your private key files are NOT accessible by others. 
>> This private key will be ignored. 
>> bad permissions: ignore key: /etc/ssh_host_ed25519_key 
>> Could not load host key: /etc/ssh_host_ed25519_key 
>> Disabling protocol version 2. Could not load host key 
>> sshd: no hostkeys available -- exiting. 
>> 
>> 
>> So I tried changing the file's permissions but I can't seem to change them 
>> 
>> harvey@samsung350 ~ 
>> $ ls -l /etc/ssh_host_ed25519_key 
>> -rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 
>> 
>> harvey@samsung350 ~ 
>> $ chmod 600 /etc/ssh_* 
>> 
>> harvey@samsung350 ~ 
>> $ ls -l /etc/ssh_host_ed25519_key 
>> -rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 

>Note the extra permissions indicated by the trailing '+'.  Try 
>`setfacl -b /etc/ssh_host_ed25519_key'. 
>Corinna 


Thanks.. 

I reinstalled cygwin so as to update setfacl to include -b and then ran that command and then ssh works.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: can't change a file's permissions  + some ssh
  2015-06-07 17:47 Marilo
@ 2015-06-08 12:44 ` Corinna Vinschen
  0 siblings, 0 replies; 3+ messages in thread
From: Corinna Vinschen @ 2015-06-08 12:44 UTC (permalink / raw)
  To: cygwin

[-- Attachment #1: Type: text/plain, Size: 1492 bytes --]

On Jun  7 17:46, Marilo wrote:
> after some fiddling with ssh.. removing the service, removing keys, re-running ssh-host-config, I got this error 
> 
> harvey@samsung350 ~ 
> $ tail /var/log/sshd.log 
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
> @         WARNING: UNPROTECTED PRIVATE KEY FILE!          @ 
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
> Permissions 0670 for '/etc/ssh_host_ed25519_key' are too open. 
> It is required that your private key files are NOT accessible by others. 
> This private key will be ignored. 
> bad permissions: ignore key: /etc/ssh_host_ed25519_key 
> Could not load host key: /etc/ssh_host_ed25519_key 
> Disabling protocol version 2. Could not load host key 
> sshd: no hostkeys available -- exiting.
> 
> 
> So I tried changing the file's permissions but I can't seem to change them
> 
> harvey@samsung350 ~ 
> $ ls -l /etc/ssh_host_ed25519_key 
> -rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 
> 
> harvey@samsung350 ~ 
> $ chmod 600 /etc/ssh_* 
> 
> harvey@samsung350 ~ 
> $ ls -l /etc/ssh_host_ed25519_key 
> -rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 

Note the extra permissions indicated by the trailing '+'.  Try
`setfacl -b /etc/ssh_host_ed25519_key'.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

[-- Attachment #2: Type: application/pgp-signature, Size: 819 bytes --]

^ permalink raw reply	[flat|nested] 3+ messages in thread

* can't change a file's permissions  + some ssh
@ 2015-06-07 17:47 Marilo
  2015-06-08 12:44 ` Corinna Vinschen
  0 siblings, 1 reply; 3+ messages in thread
From: Marilo @ 2015-06-07 17:47 UTC (permalink / raw)
  To: cygwin

after some fiddling with ssh.. removing the service, removing keys, re-running ssh-host-config, I got this error 

harvey@samsung350 ~ 
$ tail /var/log/sshd.log 
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
@         WARNING: UNPROTECTED PRIVATE KEY FILE!          @ 
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ 
Permissions 0670 for '/etc/ssh_host_ed25519_key' are too open. 
It is required that your private key files are NOT accessible by others. 
This private key will be ignored. 
bad permissions: ignore key: /etc/ssh_host_ed25519_key 
Could not load host key: /etc/ssh_host_ed25519_key 
Disabling protocol version 2. Could not load host key 
sshd: no hostkeys available -- exiting.


So I tried changing the file's permissions but I can't seem to change them

harvey@samsung350 ~ 
$ ls -l /etc/ssh_host_ed25519_key 
-rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 

harvey@samsung350 ~ 
$ chmod 600 /etc/ssh_* 

harvey@samsung350 ~ 
$ ls -l /etc/ssh_host_ed25519_key 
-rw-rwx---+ 1 cyg_server root 411 Jun  7 17:23 /etc/ssh_host_ed25519_key 

harvey@samsung350 ~ 
$ 



I can run 
$ echo asdf>c:\fffdfs   So I do have administrative permissions.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2015-06-10  0:43 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2015-06-10  0:43 can't change a file's permissions + some ssh Marilo
  -- strict thread matches above, loose matches on Subject: below --
2015-06-07 17:47 Marilo
2015-06-08 12:44 ` Corinna Vinschen

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).