SSH key login fails because /storage has write permissions for group, others

ssen · October 5, 2016 at 12:07 AM

I spent some time figuring this out. And found other people on google who had the same problem with LibreELEC (probably the same as they didn't post a solution).

Code

chmod 755 /storage

Fixes it. would be nice to change the default or at least provide a notice near the 'Disable SSH Password' option.

**lrusak** · October 5, 2016 at 8:14 AM Official Post

I've never had this happen, it should default to 755

Code

drwxr-xr-x   15 root     root        4.0K Oct  4  2016 storage

ssen · October 5, 2016 at 8:19 AM

Ok then it may be because i used NOOBS.

**chewitt** · October 6, 2016 at 4:00 AM Official Post

init: make sure /storage is owned by root · LibreELEC/LibreELEC.tv@fdcf909 · GitHub

This should be fixed in LE v7.90.006 via the above commit .. anything earlier (e.g. v7.0.2) has the potential for the issue.

ssen · October 6, 2016 at 8:42 AM

Actually i had upgraded to v7.90.006 prior to submitting this bug to see if it is still around. My problem was not that storage wasn't owned by root but that it was chmod 777. I guess adding a second line would fix it.

Code

chmod 755 /storage 2>/dev/null

**chewitt** · October 7, 2016 at 7:12 AM Official Post

Have you removed the SD card and browsed the filesystem on another PC/device? .. it's a simple fix (PR has been submitted) but it's not something that we've really seen before which is odd considering the percentage of our userbase that has Pi hardware

ssen · October 7, 2016 at 7:27 AM

I don't think so but i did the install a few months ago so i wouldn't swear on it.

**chewitt** · October 7, 2016 at 6:50 PM Official Post

Fix has been merged so it shouldn't be an issue for anyone from v7.90.007 onwards. Thanks for the investigation work

blackride · October 9, 2016 at 1:58 PM

Quote from chewitt

Fix has been merged so it shouldn't be an issue for anyone from v7.90.007 onwards. Thanks for the investigation work

Please tell me url address - 8.0
Not working :s

**chewitt** · October 9, 2016 at 5:12 PM Official Post

That URL contained private builds that were not for public consumption, hence it has been changed.

chrisonelec · January 5, 2017 at 7:45 PM

Quote from lrusak
I've never had this happen, it should default to 755
Code
drwxr-xr-x   15 root     root        4.0K Oct  4  2016 storage

Hello all,

I am a Rasberry Pi user who started with NOOBS and OpenElec. I recently upgraded to the new LibreElec, it all went very smoothly thanks!!

I have only just managed to get the password-less SSH working thanks to this thread. I noticed that the /storage was owned by user "1000" and group "1000".

Code

drwxrwxr-x   19 1000     1000          4096 Jan  5 19:19 storage


#chown root:root storage
#chmod 755 /storage


drwxr-xr-x   19 root     root          4096 Jan  5 19:34 storage

and now by public/private key works!!!

This is obviously a rare bug, but you have lots of Pi users and many people start playing around with NOOBS, so maybe you could add some script to the updater to check for this ownership issue?
(or we can hope that they do a search for SSH without password login or similar, and find there way here!)

**chewitt** · January 6, 2017 at 3:52 AM Official Post

openssh: UsePrivilegeSeparation/StrictModes not needed by MilhouseVH · Pull Request #844 · LibreELEC/LibreELEC.tv · GitHub <= this has been resolved properly in LE 8.0 builds (no hacking of user/group with scripts)