在RHEL6 上ssh 報錯open id_rsa failed: Permission denied 解決

user@ server:~$ ssh-keygen -t rsa

Generating public/private rsa key pair.
Enter file in which to save the key (/home/user/.ssh/id_rsa):
Could not create directory '/home/user/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
open /home/user/.ssh/id_rsa failed: Permission denied.

Saving the key failed: /home/user/.ssh/id_rsa.

 The only odd result in the list was: http://rhn.redhat.com/errata/RHBA-2010-0013.html which includes a paragraph:

* SELinux denials caused by the ssh-keygen's
"system_u:object_r:initrc_exec_t" context caused ssh-keygen to fail to
generate public/private RSA key pairs. These updated SELinux policy rules
allow ssh-keygen to successfully generate public/private RSA key pairs as
expected. (BZ#538453)

The problem should have been repaired in the previous version of Red Hat according to the advisory. There was no reason SELinux should be installed on the system, but considering all the other extraneous software I'd already removed, I figured it was.

user@ server:~$ sudo yum remove selinux*
Loaded plugins: product-id, rhnplugin, security, subscription-manager
Updating certificate-based repositories.
Setting up Remove Process
Resolving Dependencies
--&gt Running transaction check
---&gt Package selinux-policy.noarch 0:3.7.19-126.el6_2.4 will be erased
---&gt Package selinux-policy-targeted.noarch 0:3.7.19-126.el6_2.4 will be erased
--&gt Finished Dependency Resolution
Yes, it was. Once I removed SELinux, ssh-keygen ran successfully. So frustrating...
user@ server:~$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/user/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/user/.ssh/id_rsa.
Your public key has been saved in /home/user/.ssh/id_rsa.pub.
Note: This was causing a fprint failed error in gitolite's gl-setup also.

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/27348/viewspace-752553/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/27348/viewspace-752553/