#5320 HIGH Update.: ssh reports "bad ownership or modes for directory /home/olpc"

[Zarro Boogs per Child]

#5320: ssh reports "bad ownership or modes for directory /home/olpc"
-------------------------------+--------------------------------------------
  Reporter:  MitchellNCharity  |       Owner:  cscott             
      Type:  defect            |      Status:  new                
  Priority:  high              |   Milestone:  Update.1           
 Component:  distro            |     Version:                     
Resolution:                    |    Keywords:  rainbow-integration
  Verified:  0                 |  
-------------------------------+--------------------------------------------
Changes (by ffm):

 * cc: ffm (added)


Comment:

 That would be a bad idea, as a rouge activity could add an arbitrary ssh
 key in .ssh/authorized_keys, thus allowing the laptop to be comprimised.
 And since user olpc will soon have sudo rights, a malicious user could
 comprimise root.

-- 
Ticket URL: <http://dev.laptop.org/ticket/5320#comment:6>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system