-
Notifications
You must be signed in to change notification settings - Fork 767
OpenSSH utility scripts to fix file permissions
Yanbing edited this page Jun 3, 2017
·
20 revisions
Powershell utility scripts are included starting release V0.0.15.0 to automatically fix the permissions on various keys and configuration files for host and user. Secure protection of various files explains why secure enforcement is needed.
-
FixHostFilePermissions.ps1
: checks and fixes the below permissions on default host files:- user's authorized_keys located at
$env:systemdrive\Users\...\.ssh\authorized_keys
- host keys generated by
ssh-keygen.exe -A
in the same folder of the script - sshd_config in the same folder of the script
- user's authorized_keys located at
# script prompt to confirm you want to update each permission if Quiet is not specified
.\FixHostFilePermissions.ps1
-
FixUserFilePermissions.ps1
: checks and fixes the below file permissions for user's default files:- user's ssh_config located at ~.ssh\config
- user's keys located at ~.ssh\id_rsa, id_rsa.pub
- user's keys located at ~.ssh\id_dsa, id_dsa.pub
# -Quiet suppresses prompting to confirm you want to update each permission
.\FixUserFilePermissions.ps1 -Quiet
- Powershell module
OpenSSHUtils.psm1
checks and fixes customer specified files.- Function
Fix-HostSSHDConfigPermissions
fixes the sshd_config file specified by user - Function
Fix-HostKeyPermissions
fixes the permission for host keys specified by user - Function
Fix-UserKeyPermissions
fixes the the permissions for user's key files specified by user - Function
Fix-AuthorizedKeyPermissions
fixes the permissions for the authorized_keys file specified by user - Function
Fix-UserSSHConfigPermissions
fixes the permissions for user's ssh config specified by user
- Function
Import-Module .\OpenSSHUtils.psm1 -Force
# prompt to confirm you want to confirm you want to update each permission on the file
Fix-HostSSHDConfigPermissions c:\test\sshd_config
# -Quiet suppresses prompting to confirm you want to update each permission on the file
Fix-HostKeyPermissions -FilePath c:\test\sshtest_userssokey_ed25519 -Quiet
Fix-AuthorizedKeyPermissions -FilePath C:\Users\sshtest_ssouser\.ssh\authorized_keys -Quiet
Fix-HostUserPermissions -FilePath c:\test\sshtest_hostkey_ecdsa -Quiet
Fix-UserSSHConfigPermissions -FilePath ~\.ssh\config -Quiet
- MSI Install Instructions
- Script Install Instructions
- Alternative installation using the universal installer
- Retrieving download links for the latest packages