@recaptime-dev's working patches + fork for Phorge, a community fork of Phabricator. (Upstream dev and stable branches are at upstream/main and upstream/stable respectively.)
hq.recaptime.dev/wiki/Phorge
phorge
phabricator
Include directory-ownership note in `sshd` setup instructions
Summary: Fixes T9560. We suggest a root-owned location, but users who choose their own location instead can run into trouble.
Test Plan:
- Changed parent directory to have an non-root owner, verified that `ssh` no longer worked.
- Changed parent directory back to a root owner, verified `ssh` worked again.
Reviewers: chad
Reviewed By: chad
Maniphest Tasks: T9560
Differential Revision: https://secure.phabricator.com/D15794
+9
-3
+9
-3
src/docs/user/userguide/diffusion_hosting.diviner
+9
-3
src/docs/user/userguide/diffusion_hosting.diviner
···
200
200
**Create `phabricator-ssh-hook.sh`**: Copy the template in
201
201
`phabricator/resources/sshd/phabricator-ssh-hook.sh` to somewhere like
202
202
`/usr/libexec/phabricator-ssh-hook.sh` and edit it to have the correct
203
-
settings. Then make it owned by `root` and restrict editing:
203
+
settings.
204
204
205
-
sudo chown root /path/to/phabricator-ssh-hook.sh
206
-
sudo chmod 755 /path/to/phabricator-ssh-hook.sh
205
+
Both the script itself **and** the parent directory the script resides in must
206
+
be owned by `root`, and the script must have `755` permissions:
207
+
208
+
```
209
+
$ sudo chown root /path/to/somewhere/
210
+
$ sudo chown root /path/to/somewhere/phabricator-ssh-hook.sh
211
+
$ sudo chmod 755 /path/to/somewhere/phabricator-ssh-hook.sh
212
+
```
207
213
208
214
If you don't do this, `sshd` will refuse to execute the hook.
209
215