diff options
| author | Jameson Rollins <jrollins@finestructure.net> | 2010-03-23 02:12:33 -0400 |
|---|---|---|
| committer | Jameson Rollins <jrollins@finestructure.net> | 2010-03-23 02:12:33 -0400 |
| commit | dbeab30f940705e3813746ccf7480619d8261d37 (patch) | |
| tree | 099a0b3224b666bfc1289462f1a6d01a24763102 /website/bugs/authorized_keys_not_cleared.mdwn | |
| parent | 0f6ef9923f4d70e2a79edd898f6ac46b617480c9 (diff) | |
| parent | 2f9fe93b98ed32b662212899db6ba2174c1138d3 (diff) | |
Merge remote branch 'mjgoins/master'
Conflicts:
doc/george/changelog
Diffstat (limited to 'website/bugs/authorized_keys_not_cleared.mdwn')
| -rw-r--r-- | website/bugs/authorized_keys_not_cleared.mdwn | 24 |
1 files changed, 0 insertions, 24 deletions
diff --git a/website/bugs/authorized_keys_not_cleared.mdwn b/website/bugs/authorized_keys_not_cleared.mdwn deleted file mode 100644 index 0c4dbb6..0000000 --- a/website/bugs/authorized_keys_not_cleared.mdwn +++ /dev/null @@ -1,24 +0,0 @@ -[[!meta title="users with missing or empty authorized keys and User IDs should have MS-generated keys cleared" ]] - -I had a user who had a bunch of entries in -`~/.monkeysphere/authorized_user_ids`, and a bunch of raw keys in -`~/.ssh/authorized_keys`. My system's `monkeysphere-server` handled -this situation appropriately, and populated -`/var/lib/monkeysphere/authorized_keys/user` with the full set. - -Then i wanted to wipe out all key entries for that user. So i did: - - mkdir ~user/backup - mv ~user/.ssh ~user/.monkeysphere ~user/backup - monkeysphere-server update-users user - -I expected this to either remove -`/var/lib/monkeysphere/authorized_keys/user`, or truncate it to 0 -bytes. However, it just remained untouched, and the old keys -persisted. - -This seems like a potential security problem. - ---- - -[[bugs/done]] on 2008-10-26 in c8ab71b24b566967fdb39818d071f6548dc056c8 |