On Tue, Jul 03, 2012 at 10:04:45AM -0700, Russ Allbery wrote: > Marc Haber <[email protected]> writes: > > On Mon, Jul 02, 2012 at 02:29:53PM -0700, Russ Allbery wrote: > > >> Ah, okay. For that use case, the only thing that you would care about the > >> user home directory containing is the authorized_keys file, correct? > > > known_hosts and the key itself. > > Oh, right, for the client. Yes, yes. > > Well, personally I would not consider either the client's key or the > known_hosts file to be configuration files.
In some common situation, the known_hosts is clearly a configuration file. If ssh is restricted to connection to known hosts, then the user is supposed to prefill the known_hosts file with the small set of hosts that are allowed, then it became a configuration file. Cheers, -- Bill. <[email protected]> Imagine a large red swirl here. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/20120703174144.GG17555@yellowpig

