0

I'm using Chef to manage users on a cluster of servers. When a user is removed I'm keeping their authorized_keys file and changing the file's user/group to "nobody" after deleting the relevant user from the server. Is it bad practice to do this?

Edit: I'm running CentOS 5 on my cluster.

1
  • Welcome to Super User. Please always include your OS. Solutions very often depend on the Operating System being used. Are you using Windows, Linux, Unix, OSX, BSD? Which version?
    – terdon
    Oct 2, 2013 at 22:33

1 Answer 1

2

The authorized_keys file contains public keys, which wouldn't do any harm if they fell into some attacker's hands, they're meant to be public.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .