Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Message-ID: <00a101c28998$b2d36d30$78d96f83@pomello> From: "Max Bowsher" To: "Harig, Mark A." , References: Subject: Re: Is RSA authentication on SSH still broken? Date: Mon, 11 Nov 2002 15:40:44 -0000 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Harig, Mark A. wrote: > OK. So, it appears that Cygwin users > of openssh have one of two options: > > 1. chmod 700 ~ > chgrp 18 ~/.ssh > chmod 750 ~/.ssh > > or > > 2. chmod 755 ~ > chmod 700 ~/.ssh > > Do you have a recommendation on which of > these two options is more secure? I'm assuming you meant: $ chmod 750 ~ $ chgrp 18 ~ $ chmod 700 ~/.ssh Since obviously world-readable ~ is less secure than user-only-readable ~. In which case, 1. seems better to me, because it actually grants SYSTEM permissions where it needs them, rather than granting them somewhere else and Windows weirdness making things work. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/