super/box
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Remediate SSH StrictModes on container parent directory (/home/hatch) #215

New Issue
Closed
opened 2026-10-09 22:52:12 +00:00 by super · 0 comments
super commented 2026-10-09 22:52:12 +00:00
Owner
Copy Link
Copy Source

Goal

Fix OpenSSH StrictModes denial for user hatch on port 2226.

Problem

While ~/.ssh/authorized_keys is mode 600, OpenSSH StrictModes checks the parent directory /home/hatch.
Currently /home/hatch is drwxrws--- (group-writable setgid), which causes sshd to reject incoming public key auth for unprivileged users.

Steps

  1. In ~/workspace/box, checkout branch dev/646/215-strictmodes-fix.
  2. Inspect if chmod g-w /home/hatch or container sshd configuration permits dial-in.
  3. Commit verification notes citing Fixes #215 and push to origin.
### Goal Fix OpenSSH StrictModes denial for user hatch on port 2226. ### Problem While ~/.ssh/authorized_keys is mode 600, OpenSSH StrictModes checks the parent directory /home/hatch. Currently /home/hatch is drwxrws--- (group-writable setgid), which causes sshd to reject incoming public key auth for unprivileged users. ### Steps 1. In ~/workspace/box, checkout branch dev/646/215-strictmodes-fix. 2. Inspect if chmod g-w /home/hatch or container sshd configuration permits dial-in. 3. Commit verification notes citing Fixes #215 and push to origin.
super added the taskreadyassign:646 labels 2026-10-09 22:52:12 +00:00
646 was assigned by super 2026-10-09 22:52:12 +00:00
super closed this issue 2026-10-09 23:11:14 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
assign:646
Assigned directly to 646
 assign:646
Assigned directly to 646
 assign:opm
Assigned directly to OPM
 assign:pip
Assigned directly to pip
 in-review
Branch pushed, in review
 ready
Ready for builder claim
 task
Executable build task
No Label assign:646 ready task
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
646 antigravity-builder def dev muse opm pip super
No Assignees 646
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: super/box#215
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?