[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug#77968] [PATCH 0/1] gnu: openssh: Trust store items owned by guix-da
From: |
Sergey Trofimov |
Subject: |
[bug#77968] [PATCH 0/1] gnu: openssh: Trust store items owned by guix-daemon. |
Date: |
Mon, 21 Apr 2025 19:51:18 +0200 |
After migration to rootless guix-daemon on Guix system, ssh started to refuse
operations with the error `Bad owner or permissions on /home/sarg/.ssh/config`.
The config is managed with `home-openssh-service-type` and is a symlink to
/gnu/store/... The file was previously owned by root which is treated specially
in openssh source code.
As a solution I suggest to patch ssh to trust config files in /gnu/store/ As a
workaround users can for now use `ssh -F ~/.ssh/config` as this would skip
ownership checks.
Sergey Trofimov (1):
gnu: openssh: Trust store items owned by guix-daemon.
.../openssh-trust-guix-store-directory.patch | 67 +++++++++++++------
gnu/packages/ssh.scm | 2 +-
2 files changed, 47 insertions(+), 22 deletions(-)
base-commit: 7a7eff34613c9b3357adf39813793f607c03629d
--
2.49.0
- [bug#77968] [PATCH 0/1] gnu: openssh: Trust store items owned by guix-daemon.,
Sergey Trofimov <=