How to Restart the service sshd in Fedora Linux System ?

[Ed Greshko]

jdow wrote:
> Directory /etc/ssh - should be drwxr-xr-x. The world must have the
> rights to read and enter the directory but not write to it.
>
> Most of the files should be -rw-------. Only root can read or write
> them. None should have x permission. And ssh_config and the .pub
> files should be -rw-r--r--.
>
> Nobody but root should be able to write to that directory under any
> circumstance or your system is open to exploitation.
>
> Each user ~/.ssh directory should be drwxr-xr-x. Each file should be
> -rw-r--r--. (This is probably wrong. The directory probably should be
> drwx------ and the files should be -rw-------. But under RedHat and
> Fedora home directories are drwx------, so people who do not belong
> can't get to the directory in the first place.
Yes, your second statement is "more" correct.  The ~/.ssh directory
should be drwx------.

While, as you point out, it won't make a difference in cases where one
doesn't alter the defaults of user creation.  In cases where you assign
groups or add users to various groups it could become a factor.  So as
not to tax ones memory I feel it is good practice to advise drwx------.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20081224/84ca3867/attachment-0001.sig>