Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

non-owner accesses authorized_keys #629

Merged
merged 1 commit into from
Dec 23, 2024
Merged

non-owner accesses authorized_keys #629

merged 1 commit into from
Dec 23, 2024

Conversation

beroal
Copy link
Contributor

@beroal beroal commented Dec 17, 2024

When I try to log into a local SSH server, I get the following log messages:

apparmor="DENIED" operation="open" class="file" profile="sshd" name="/home/remote/.ssh/authorized_keys"  comm="sshd-session" requested_mask="r" denied_mask="r" fsuid=1005 ouid=0 FSUID="remote" OUID="root"
apparmor="DENIED" operation="exec" class="file" profile="sshd" name="/usr/bin/userdbctl"  comm="sshd-session" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 FSUID="root" OUID="root"

After removing owner in

  owner @{HOME}/@{XDG_SSH_DIR}/authorized_keys{,.*} r,

no log messages.

@roddhjav
Copy link
Owner

roddhjav commented Dec 23, 2024

Thanks, merged!

Note: the sshd profile will soon have a major update to better handle the new sshd-session binary. Will have to double check this issue is not raised again.

@roddhjav roddhjav merged commit b35c2a0 into roddhjav:main Dec 23, 2024
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants