OpenSSH: restrict file permissions for sshd_config to 0600

This file does not have to be readable by anybody else than the user
running an OpenSSH server. While it does not really contain confidential
information, exposing it to the rest of the world makes no sense either.

This will silence a Lynis warning. :-)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Peter Müller
2021-05-30 12:33:31 +02:00
committed by Michael Tremer
parent 97c76ea56f
commit a9fb87809e

View File

@@ -84,7 +84,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
cd $(DIR_APP) && make install
# install custom OpenSSH server configuration
install -v -m 644 $(DIR_SRC)/config/ssh/sshd_config \
install -v -m 600 $(DIR_SRC)/config/ssh/sshd_config \
/etc/ssh/sshd_config
# install custom OpenSSH client configuration