Project

General

Profile

Actions
Copy link

Architecture #15094

open

authorized_keys2 could be a security risk

Added by Matthew Frost almost 5 years ago. Updated over 3 years ago.

Status:
New
Priority:
N/A
Assignee:
-
Category:
Techniques
Target version:
-
Pull Request:
Effort required:
Name check:
Fix check:
Regression:

Description

In most linux operating systems the openssh daemon will honer another file called authorized_keys2 this is not currently visible to rudder meaning it might serve as a way to bypass rudder policy enforcement of the authorized keys.

grep -r "autho" /etc/ssh/sshd_config
  1. Expect .ssh/authorized_keys2 to be disregarded by default in future.
    #AuthorizedKeysFile .ssh/authorized_keys .ssh/authorized_keys2

Would it be possible to allow for the setting AuthorizedKeysFile to be adjusted from rudder or for rudder to manage the authorized_keys2 file?

Thanks!

Actions
Copy link

Also available in: Atom PDF