Back to lessons

Cybersecurity Triage

List authorized_keys Files

You need to find authorized_keys files and their modes.

Command

find home -path '*/.ssh/authorized_keys' -printf '%m %p\n'

What changed

Nothing changes. The command prints matching files with permissions.

Danger

safe

When to use it

Use during access inventory, server handoff, or after removing a user.

When not to use it

Do not remove keys from this output alone; confirm ownership and active dependencies first.

Undo or recovery

No undo needed because this command is read-only.

Expected output

File modes and paths for authorized_keys files.

demo script

Disposable terminal steps

  1. find home -type f -path '*/.ssh/*' -printf '%m %p\n' | sort
  2. find home -path '*/.ssh/authorized_keys' -printf '%m %p\n'

simulated output

What it looks like

disposable vessel
::fixture-ready::
$ find home -type f -path '*/.ssh/*' -printf '%m %p\n' | sort
600 home/alex/.ssh/authorized_keys
600 home/deploy/.ssh/authorized_keys
644 home/deploy/.ssh/id_rsa
::exit-code::0
$ find home -path '*/.ssh/authorized_keys' -printf '%m %p\n'
600 home/deploy/.ssh/authorized_keys
600 home/alex/.ssh/authorized_keys
::exit-code::0

YouTube Short

Inventory authorized_keys.

Find authorized keys files and modes so you know where SSH access is configured.

LinkedIn hook

Authorized keys are the server's practical access list.

Question: Do you inventory authorized_keys files during server handoff?

experiments

A/B tests to run

Metric: save_rate

A: Practical access list.

B: Find authorized_keys files.