Git-Mirrors/Qubes-Community-Content
1
0
Fork 0
mirror of https://github.com/Qubes-Community/Contents.git synced 2025-01-24 13:31:19 -05:00
Code Issues Packages Projects Releases Wiki Activity

Update split-ssh.md

Browse Source
This commit is contained in:
Santori Helix 2020-11-18 13:21:28 +00:00 committed by GitHub
parent 434f6d6e51
commit c3d49d80de
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/configuration/split-ssh.md
View File

@ -371,6 +371,12 @@ In order to gain access to the vault VM, the attacker would require the use of,
## Further Security tips ## Further Security tips
### Regarding Your SSH Private Key ### Regarding Your SSH Private Key
* This goes without saying but keep your private keys **private**.
* Typically you want your the permissions to your key-related files to be
`.ssh` directory: `700 (drwx------)`
public key (`id_ed25519.pub` file): `644 (-rw-r--r--)`
private key (`id_ed25519`): `600 (-rw-------)`
lastly your home directory should not be writeable by the group or others (at most 755 (drwxr-xr-x)).
### Regarding Your KeePassXC Database File ### Regarding Your KeePassXC Database File
Although the database file is encrpyted with your password, if you haven't taken any protective measures, it can be bruteforced. Although the database file is encrpyted with your password, if you haven't taken any protective measures, it can be bruteforced.