Skip to content

Commit 30f9309

Browse files
cgwalterskeszybz
authored andcommitted
docs/CREDENTIALS: Don't write authorized_keys with executable bits
No reason to make this file executable. (cherry picked from commit 47374e0)
1 parent b1dba6b commit 30f9309

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/CREDENTIALS.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -455,7 +455,7 @@ qemu-system-x86_64 \
455455
-device scsi-hd,drive=hd,bootindex=1 \
456456
-device vhost-vsock-pci,id=vhost-vsock-pci0,guest-cid=42 \
457457
-smbios type=11,value=io.systemd.credential:vmm.notify_socket=vsock:2:1234 \
458-
-smbios type=11,value=io.systemd.credential.binary:tmpfiles.extra=$(echo "f~ /root/.ssh/authorized_keys 700 root root - $(ssh-add -L | base64 -w 0)" | base64 -w 0)
458+
-smbios type=11,value=io.systemd.credential.binary:tmpfiles.extra=$(echo "f~ /root/.ssh/authorized_keys 600 root root - $(ssh-add -L | base64 -w 0)" | base64 -w 0)
459459
```
460460

461461
A process on the host can listen for the notification, for example:

0 commit comments

Comments
 (0)