permissions of the very first known_hosts.old

Valery Ushakov <[email protected]> Mon, 5 Feb 2024 05:14:00 +0300
Newsgroups gmane.os.netbsd.devel.security
Message-ID <[email protected]>
I have installed a new disk in my macppc.  On a freshly installed
10.0_RC4 machine with an empty home directory I do "slogin foo".
After that I can see in my newly created ~/.ssh

  -rw-------  1 uwe  uwe  947 Feb  5 05:07 known_hosts
  -rw-r--r--  1 uwe  uwe  101 Feb  5 05:07 known_hosts.old

where known_hosts.old contains the ed25519 key for the host foo and
known_hosts contains all the keys for it.  The permissions of
known_hosts.old is probably not much of a problem b/c the .ssh
directory itself is 0700, but it's still kinda icky.

I'd appreciate it if someone more familiar with ssh could verify this
and report this to upstream properly if that's an upstream bug.  TIA.

-uwe