Re: [Proftpd-user] running proftp under non-privileged user

>> So, it has to be owned by the running user, or at readable it we relax the
>> permission check:
>>
>> SFTPOptions InsecureHostKeyPerms
>> SFTPHostKey /etc/proftpd/ssh_host_rsa_key
>>
>> It works although complains in log as well:
>>
>> Mar 20 15:54:37 server proftpd[175306]: Checking syntax of
>> configuration file
>> Mar 20 15:54:37 server proftpd[175306]: 2026-03-20 15:54:37,411 server
>> proftpd[175306]: mod_sftp/1.1.1: unable to use
>> '/etc/proftpd/ssh_host_rsa_key' as host key, as it is group- or
>> world-accessible

On 21.03.26 10:30, TJ Saunders wrote:
> Even with "SFTPOptions InsecureHostKeyPerms", I wanted to log something, at 
> config parse time, so that admins would be aware of the insecure 
> permissions on those files.  Perhaps that is overkill?  At the very least, 
> I will change the log level from NOTICE to INFO (perhaps DEBUG?), and 
> change the wording to be more accurate, as "unable to use" when, in fact, 
> the key _is_ used is wrong.

That makes sense, thanks for explanation.

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Remember half the people you know are below average.


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html