Make sure host private key permissions aren't too open so sshd won't complain.

1 files changed, 8 insertions, 1 deletions

diff --git a/etc/sshd b/etc/sshd
index b0aa40f..28c8e55 100755
--- a/etc/sshd
+++ b/etc/sshd
@@ -53,7 +53,14 @@
 	if($g['platform'] == "nanobsd" and file_exists("/conf/sshd/ssh_host_key")) {
 		if(!file_exists("/etc/ssh/ssh_host_key.pub")) {
 			echo "Restoring SSH from /conf/sshd/";
-			exec("cp /conf/sshd/* /etc/ssh/");
+			exec("/bin/cp -p /conf/sshd/* /etc/ssh/");
+
+			/* make sure host private key permissions aren't too open so sshd won't complain */
+			$files_to_check = array('ssh_host_dsa_key','ssh_host_key','ssh_host_rsa_key');
+			foreach($files_to_check as $f2c) {
+				if(file_exists("/etc/ssh/{$f2c}"))
+					chmod("/etc/ssh/{$f2c}", 0600);
+			}
 		}
 	}