GNU logs - #67789, boring messages

Message sent to guix-patches@HIDDEN:

Subject: [bug#67789] [PATCH] doc: Secure Shell: Add note about sshd and wrong permissions
Resent-From: "zero@fedora" <shinyzero0@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Mon, 11 Dec 2023 23:37:01 +0000
Resent-Message-ID: <handler.67789.B.17023377812914 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 67789 <at> debbugs.gnu.org
Cc: "zero@fedora" <shinyzero0@HIDDEN>
From: "zero@fedora" <shinyzero0@HIDDEN>
Date: Tue, 12 Dec 2023 02:35:32 +0300
Message-ID: <20231211233532.63690-1-shinyzero0@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=2607:5300:203:b92b::114;
 envelope-from=shinyzero0@HIDDEN; helo=tilde.club
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.9 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.1 (/)

* doc/guix.texi (Home services: Secure Shell): Add note about sshd blocking connections because of wrong permissions
---
 doc/guix.texi | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/guix.texi b/doc/guix.texi
index 7dde9b727b..832fed3b97 100644
--- a/doc/guix.texi
+++ b/doc/guix.texi
@@ -44306,6 +44306,13 @@ predictable fashion, almost independently of state on the local machine.
 To do that, you instantiate @code{home-openssh-service-type} in your
 Home configuration, as explained below.
 
+@quotation Note
+Note that @command{sshd} will block any @command{ssh} connections to you if
+your files in @file{~/.ssh} have wrong permissions or ownership, as the ones
+created by this service do. To fix that, you need to set @code{StrictModes=no}
+in your @command{sshd} configuration
+@end quotation
+
 @defvar home-openssh-service-type
 This is the type of the service to set up the OpenSSH client.  It takes
 care of several things:
-- 
2.43.0

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: "zero@fedora" <shinyzero0@HIDDEN>
Subject: bug#67789: Acknowledgement ([PATCH] doc: Secure Shell: Add note
 about sshd and wrong permissions)
Message-ID: <handler.67789.B.17023377812914.ack <at> debbugs.gnu.org>
References: <20231211233532.63690-1-shinyzero0@HIDDEN>
X-Gnu-PR-Message: ack 67789
X-Gnu-PR-Package: guix-patches
X-Gnu-PR-Keywords: patch
Reply-To: 67789 <at> debbugs.gnu.org
Date: Mon, 11 Dec 2023 23:37:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 guix-patches@HIDDEN

If you wish to submit further information on this problem, please
send it to 67789 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
67789: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D67789
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to guix-patches@HIDDEN:

Subject: [bug#67789] [PATCH] doc: Secure Shell: Add note about sshd and wrong permissions
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Thu, 14 Dec 2023 13:44:01 +0000
Resent-Message-ID: <handler.67789.B67789.170256142228422 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: "zero@fedora" <shinyzero0@HIDDEN>
Cc: 67789 <at> debbugs.gnu.org
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
In-Reply-To: <20231211233532.63690-1-shinyzero0@HIDDEN>
 (shinyzero0@HIDDEN's message of "Tue, 12 Dec 2023 02:35:32 +0300")
References: <20231211233532.63690-1-shinyzero0@HIDDEN>
Date: Thu, 14 Dec 2023 14:43:30 +0100
Message-ID: <87le9wx5kt.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hello,

"zero@fedora" <shinyzero0@HIDDEN> skribis:

> * doc/guix.texi (Home services: Secure Shell): Add note about sshd blocki=
ng connections because of wrong permissions

[...]

> +@quotation Note
> +Note that @command{sshd} will block any @command{ssh} connections to you=
 if
> +your files in @file{~/.ssh} have wrong permissions or ownership, as the =
ones
> +created by this service do. To fix that, you need to set @code{StrictMod=
es=3Dno}
> +in your @command{sshd} configuration
> +@end quotation

I think we=E2=80=99d rather fix the permissions of those files than documen=
t the
bug.

On my laptop permissions seem to be good:

--8<---------------cut here---------------start------------->8---
$ ls -ld ~/.ssh/authorized_keys=20
lrwxrwxrwx 1 ludo users 59 Dec 10 23:36 /home/ludo/.ssh/authorized_keys -> =
/gnu/store/k79g5iaaa7gij52nrbhjz6fqq7banzdz-authorized_keys
$ ls -ld ~/.ssh=20
drwx------ 3 ludo users 4096 Dec 10 23:36 /home/ludo/.ssh/
$ ssh localhost uname
Linux
--8<---------------cut here---------------end--------------->8---

Maybe there are cases when this is not the case, maybe when ~/.ssh does
not exist prior to running =E2=80=98guix home reconfigure=E2=80=99?

Thanks,
Ludo=E2=80=99.

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 14 Dec 2023 13:43:45 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Dec 14 08:43:45 2023
Received: from localhost ([127.0.0.1]:49008 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rDm08-0007Ob-Tp
	for submit <at> debbugs.gnu.org; Thu, 14 Dec 2023 08:43:45 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:52178)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1rDm07-0007OC-Dh
 for control <at> debbugs.gnu.org; Thu, 14 Dec 2023 08:43:43 -0500
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <ludo@HIDDEN>) id 1rDm02-0005F5-DY
 for control <at> debbugs.gnu.org; Thu, 14 Dec 2023 08:43:38 -0500
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=MIME-version:Subject:From:To:Date:in-reply-to:
 references; bh=7BbPxX4Ko3Z0iHT67vfuaPlZQ7Qme9kfjdxYRePEb84=; b=kxXYB96GYYKW+b
 OweH3zlX601yh7Pm8K7nrMFLQM778hKNK1bMojTa1uFDemIhain+n/rwJjMEsWfWRQ+96G9DYN9sd
 gNSulfubfrLjaoiqFxAJOapPF0oseh0EHYchmXaHlP15lmMf3Qp1QOGK2oc283kCEFSBKogAGoohq
 lisoE7o1/53FX3nF7U2HdPDlYAL6b1oqg/WDcJuEAn7fKLGdILuYijzG1o7HOe07PHs6w0LH5MSOK
 8yqYxzNhBaayVMi926Pz5+gUfQD9e8jsF7YfiJsZd1x07njL03rE7UJHv7hepZDTOs2QHGeN9w58X
 mJg/IUGMQkJylvLELaFw==;
Date: Thu, 14 Dec 2023 14:43:36 +0100
Message-Id: <87jzpgx5kn.fsf@HIDDEN>
To: control <at> debbugs.gnu.org
From: =?utf-8?Q?Ludovic_Court=C3=A8s?= <ludo@HIDDEN>
Subject: control message for bug #67789
MIME-version: 1.0
Content-type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: control
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

tags 67789 + moreinfo
quit

Message sent to guix-patches@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: [bug#67789] [PATCH] doc: Secure Shell: Add note about sshd and wrong permissions
Resent-From: "ShinyZero0" <shinyzero0@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: guix-patches@HIDDEN
Resent-Date: Fri, 15 Dec 2023 19:25:02 +0000
Resent-Message-ID: <handler.67789.B67789.170266828029004 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 67789
X-GNU-PR-Package: guix-patches
X-GNU-PR-Keywords: moreinfo patch
To: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Cc: 67789 <at> debbugs.gnu.org
Received: via spool by 67789-submit <at> debbugs.gnu.org id=B67789.170266828029004
          (code B ref 67789); Fri, 15 Dec 2023 19:25:02 +0000
Received: (at 67789) by debbugs.gnu.org; 15 Dec 2023 19:24:40 +0000
Received: from localhost ([127.0.0.1]:53471 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rEDnc-0007Xk-2i
	for submit <at> debbugs.gnu.org; Fri, 15 Dec 2023 14:24:40 -0500
Received: from tilde.club ([142.44.150.184]:38618 ident=postfix)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <shinyzero0@HIDDEN>) id 1rEDnX-0007XT-HG
 for 67789 <at> debbugs.gnu.org; Fri, 15 Dec 2023 14:24:39 -0500
Received: from localhost (unknown [77.91.85.198])
 by tilde.club (Postfix) with ESMTPSA id A2EA8223DC634;
 Fri, 15 Dec 2023 19:24:33 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 tilde.club A2EA8223DC634
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tilde.club; s=mail;
 t=1702668274; bh=j5w5ZGIBBk9tAFyhN+hSsS/M5nrZM/fsy47PWXiO14Y=;
 h=Date:Cc:Subject:From:To:References:In-Reply-To:From;
 b=wobqKoZFGC/Gxkd4IamX1GHwkTpmBG3eTa6+t7XdWCXjpy23+urbaWcley6X0mf1X
 Ny0/OXntVyGVaSuiqs/8vY0ZWWBr9UrKeLK4UJiGRUCohmY4iK3Xp9x3nputOfyfcj
 C+N5JnC12rrxXMFW114kw5TcrT8tuF3AUj5uCJzI=
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Fri, 15 Dec 2023 22:24:23 +0300
Message-Id: <CXP5IXYUT1EA.2VBTIL3Q5CK0P@fedora>
From: "ShinyZero0" <shinyzero0@HIDDEN>
X-Mailer: aerc 0.15.2
References: <20231211233532.63690-1-shinyzero0@HIDDEN>
 <87le9wx5kt.fsf@HIDDEN>
In-Reply-To: <87le9wx5kt.fsf@HIDDEN>
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

On Thu Dec 14, 2023 at 4:43 PM MSK, Ludovic Court=C3=A8s wrote:
> On my laptop permissions seem to be good:
>
> --8<---------------cut here---------------start------------->8---
> $ ls -ld ~/.ssh/authorized_keys=20
> lrwxrwxrwx 1 ludo users 59 Dec 10 23:36 /home/ludo/.ssh/authorized_keys -=
> /gnu/store/k79g5iaaa7gij52nrbhjz6fqq7banzdz-authorized_keys
> $ ls -ld ~/.ssh=20
> drwx------ 3 ludo users 4096 Dec 10 23:36 /home/ludo/.ssh/
> $ ssh localhost uname
> Linux
> --8<---------------cut here---------------end--------------->8---
>
> Maybe there are cases when this is not the case, maybe when ~/.ssh does
> not exist prior to running =E2=80=98guix home reconfigure=E2=80=99?
>
> Thanks,
> Ludo=E2=80=99.

I'm using guix on foreign (Fedora) distro, obviously i had ~/.ssh
directory with right permissions before replacing it with guix-generated
one. Maybe it's vice versa: the permissions are wrong when the ~/.ssh is
being replaced?
Honestly, i thought it's unfixable, like, can we change
the permissions of a symlink?
Oh, and i checked my permissions, and they are the same. Maybe the
problem is in somewhere within my sshd?
Thanks,
Paul.

Last modified: Sat, 20 Jan 2024 12:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.