From 963137cbfb09a82a529faf53aa44bfd7e296da03 Mon Sep 17 00:00:00 2001
From: Petr Lautrbach <plautrba@redhat.com>
Date: Dec 09 2013 10:19:32 +0000
Subject: sshd-keygen - create an ecdsa host key with 640 permissions (#1023945)


---

diff --git a/sshd-keygen b/sshd-keygen
index 13a0043..db2845c 100644
--- a/sshd-keygen
+++ b/sshd-keygen
@@ -95,7 +95,7 @@ do_ecdsa_keygen() {
 		rm -f $ECDSA_KEY
 		if test ! -f $ECDSA_KEY && $KEYGEN -q -t ecdsa -f $ECDSA_KEY -C '' -N '' >&/dev/null; then
 			chgrp ssh_keys $ECDSA_KEY
-			chmod 600 $ECDSA_KEY
+			chmod 640 $ECDSA_KEY
 			chmod 644 $ECDSA_KEY.pub
 			if [ -x /sbin/restorecon ]; then
 			    /sbin/restorecon $ECDSA_KEY.pub