UNIX for Dummies Questions & Answers

Hi All,

pn:/wrk/an/tran/cr>) ls -ld .ssh
drwx------ 2 crcv1ftp canusr 96 May 2 2007 .ssh


I had .ssh directory inside a directory . When i trying to do find and delete automatic script . The find comman is failing saying it dont have permision to read .ssh .

Can i move the .ssh directory from the current to directory to on step below.

i mean moving .ssh directory from
:/wrk/an/tran/cr to :/wrk/an/tran/

will it create a problem ..

Please let me know .

Thanks,
Arun

.ssh is the directory containing any key pairs you may have created. Should be in the user's home dir and contains your authorized_keys file (if you have one) and the list of known hosts ssh has encountered.

What user has /wrk/an/tran/cr as it's home directory?
If you move the .ssh directory, when that user next runs ssh it will create a new one and will identify any host you connect to as new, requiring you to answer a short question about trusting the host or not before connecting.

Thanks for the answer ..

One more question . Currently my .ssh directory has permision as below

drwx------ 2 pnlf pwr 96 Jun 2 2006 .ssh

can i change the permision of the directory ? as below

chmod 755 .ssh , so it will be as

drwxr-xr-x 2 pnlf pwr 96 Jun 2 2006 .ssh

would it make sense ? . Even if i changed the permsion when the user again run .ssh will this permssion be retained .

Thanks in advance ,
Arun.

Just i read by google stating that .ssh can be in 755 mode and it is advicable to have that in 700 . But i need to set that in 755 mode so that my my find and delete will not fail .Please let me know can i make the .ssh in 755 mode .

Is it correct ot make that to 755 mode ?..

I know that .ssh will contains important files . If i make that to 755 mode will it lead to hacking kinds of activity ?..

Thanks,
Arun

It's pretty well up to you. If you allow other's to read the contents of the .ssh dir, they cangrab your public key (if you have one) and use it to grant you access via ssh to accounts they control. If you keep it 0700 they can't do this.

The files in there you need to protect from people reading are the private keys mainly.
The big one is to not grant any write access to anyone other than yourself for the .ssh dir or any of the files in it.