pacmanager icon indicating copy to clipboard operation
pacmanager copied to clipboard

UNPROTECTED PRIVATE KEY FILE!

Open pantos27 opened this issue 8 years ago • 2 comments

I created a new ssh connection with a pem private key file I got error messages every time I tried to connect which did not specify the nature of the problem

Later I used ssh on my terminal and got this message: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: UNPROTECTED PRIVATE KEY FILE! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Permissions 0777 for 'Instance.pem' are too open. It is required that your private key files are NOT accessible by others. This private key will be ignored. Load key "Instance.pem": bad permissions Permission denied (publickey).

I ran 'chmod 400' on the file and the problem was solved, both on the terminal and in PAC manager

Maybe you should handle this case within the manager itself

pantos27 avatar Nov 22 '17 14:11 pantos27

This has really nothing todo with pac manager. If you set the correct permissions that ssh expects from the beginning Pac manager would not encounter this (this goes for any application using ssh with keys on the system.

I don't think its a good idea that pac manager starts modifying permissions of files.

telefax avatar Jan 21 '18 09:01 telefax

An unprotected private key file should be considered compromised if there are more people on the machine that could have read the file. PAC should do nothing about it, so that you are forced to deal with it.

pinacoelho avatar Apr 24 '18 09:04 pinacoelho