Wrong permissions on authorized_keys

Description

Version: TrueNAS-12.0-BETA

When adding an SSH authorized key to a user through the web interface: Accounts -> Users -> Edit -> Authentication -> SSH Public Key, the ~/.ssh/authorized_keys is created with root owner instead of user owner. This makes it impossible to ssh using public key with non root users.

Problem/Justification

None

Impact

None

SmartDraw Connector

Katalon Manual Tests (BETA)

Activity

Andrew Walker

August 3, 2020 at 8:51 PM

The problem is actually caused by a regression filesystem.setperm / filesystem.setacl in BETA1.

Immediately before your fix we call:
await self.middleware.call('filesystem.setperm', {
'path': sshpath,
'mode': str(700),
'uid': user['uid'],
'gid': gid,
'options': {'recursive': True, 'stripacl': True}
})
which since the authorized_keys file exists at that time will recursively set its owner. Problem is that recursive owner changes were broken. This will be fixed in BETA2.

Pharoah Baze

August 3, 2020 at 5:12 PM

Origin of the problem: https://github.com/freenas/freenas/blob/master/src/middlewared/middlewared/plugins/account.py#L865

Patch fixing the issue:

Resize work item view side panel

Duplicate

Details

Assignee

Triage Team

Reporter

Pharoah Baze

Impact

Medium

Fix versions

N/A

Affects versions

12.0-BETA1

Priority

Low

More fields

Katalon Platform

Created August 2, 2020 at 11:25 PM

Updated July 1, 2022 at 4:56 PM

Resolved August 4, 2020 at 1:10 PM