Skip to content

Commit 7d6b40b

Browse files
authored
ensure that the sshd privilege separation directory exists (#480)
Adds /usr/lib/tmpfiles.d/sshd-priv-sep.conf to ensure that /run/sshd exists on all boots. Addresses #478
1 parent 87e9f09 commit 7d6b40b

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

salt/ssh/init.sls

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,15 @@ ssh:
2121
- mode: "0644"
2222

2323

24+
/usr/lib/tmpfiles.d/sshd-priv-sep.conf:
25+
file.managed:
26+
- contents: |
27+
d /run/sshd 0755 root root
28+
- user: root
29+
- group: root
30+
- mode: "0644"
31+
32+
2433
# If we have defined host keys for this server, then we want to drop them here
2534
# instead of whatever is here by default.
2635
{% for fn in host_keys %}

0 commit comments

Comments
 (0)