From 0cafda3e8bcf771dd863c81c098f1162c66cd9f4 Mon Sep 17 00:00:00 2001 From: missytake Date: Tue, 1 Sep 2026 12:17:21 +0200 Subject: [PATCH 1/2] fix: fix ssh_config_file group ownership for non-admin incus fix #47 --- src/cmlxc/incus.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/cmlxc/incus.py b/src/cmlxc/incus.py index 18fb3c9..b1f2139 100644 --- a/src/cmlxc/incus.py +++ b/src/cmlxc/incus.py @@ -10,6 +10,7 @@ import ipaddress import json +import os import subprocess from pathlib import Path @@ -88,6 +89,7 @@ def write_ssh_config(self): containers = self.list_managed() text = format_ssh_config(containers, self.ssh_key_path) self.ssh_config_path.write_text(text) + os.chown(self.ssh_config_path, os.getuid(), os.getuid()) return self.ssh_config_path def check_ssh_include(self): From 1d5989b9fedcba47e24be924ec3e62c4a73db00e Mon Sep 17 00:00:00 2001 From: missytake Date: Wed, 30 Sep 2026 14:50:58 +0200 Subject: [PATCH 2/2] fix: chmod is sufficient to secure SSH config permissions --- src/cmlxc/incus.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/cmlxc/incus.py b/src/cmlxc/incus.py index b1f2139..a63c284 100644 --- a/src/cmlxc/incus.py +++ b/src/cmlxc/incus.py @@ -10,7 +10,6 @@ import ipaddress import json -import os import subprocess from pathlib import Path @@ -89,7 +88,7 @@ def write_ssh_config(self): containers = self.list_managed() text = format_ssh_config(containers, self.ssh_key_path) self.ssh_config_path.write_text(text) - os.chown(self.ssh_config_path, os.getuid(), os.getuid()) + self.ssh_config_path.chmod(0o600) return self.ssh_config_path def check_ssh_include(self):