Merge pull request #10 from mrzarquon/fix/ssh

fixes issue with /etc/ssh/sdm_ca.pub permissions
strongdm · May 26, 2022 · 250a4a5 · 250a4a5
2 parents f27f3a6 + 15e2c17
commit 250a4a5
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/onboarding/http/templates/http_install/http_install.tftpl b/onboarding/http/templates/http_install/http_install.tftpl
@@ -2,6 +2,7 @@
 
 # add sdm public key
 echo "${SSH_PUB_KEY}" | tee -a /etc/ssh/sdm_ca.pub
+chmod 600 /etc/ssh/sdm_ca.pub
 echo "TrustedUserCAKeys /etc/ssh/sdm_ca.pub" | tee -a /etc/ssh/sshd_config
 systemctl restart sshd
 

diff --git a/onboarding/mysql/templates/mysql_install/mysql_install.tftpl b/onboarding/mysql/templates/mysql_install/mysql_install.tftpl
@@ -1,5 +1,6 @@
 #!/bin/bash
 echo "${SSH_PUB_KEY}" | tee -a /etc/ssh/sdm_ca.pub
+chmod 600 /etc/ssh/sdm_ca.pub
 echo "TrustedUserCAKeys /etc/ssh/sdm_ca.pub" | tee -a /etc/ssh/sshd_config
 systemctl restart ssh