Re: Default permissions of /home/user..

From: Andrew McNaughton (andrew_at_scoop.co.nz)
Date: 10/22/04

  • Next message: Bill Moran: "Re: Default permissions of /home/user.." 
    Date: Sat, 23 Oct 2004 02:34:07 +1300 (NZDT)
To: Jesper Wallin <jesper@hackunite.net>

    On Thu, 21 Oct 2004, Jesper Wallin wrote:

    > Hello..
    >
    > I've asked this question before without getting any further help really..
    > When a new user is added using "adduser" on 5.x (havn't really checked
    > if it's the same under 4.x or not), the default homedir permission is 755
    > (drwxr-xr-x) which to me, looks a bit insecure? It's of course pretty easy
    > to solve it by a simple chmod, but yet, isn't there anyway to change the
    > default chmod value? Last time I asked about this, people told me to check
    > out the skel directory, but the only thing you can do in there is to change the
    > default chmod value of the files/directories _in_ the homedir, not the chmod
    > values of the actually homedir.. I would be glad if someone could give me
    > further assistanse how do solve this without manually modifying the "adduser"
    > script.. and if it this option doesn't exist, shouldn't it be added or is it just
    > me who want my homedir secure from other users? ;)

    By default, anyone can read a user's home directory, but because normally
    noone is in the user's default group except the user themselves, noone
    else can write to it.

    If a user wants to restrict access to their entire home directory, they
    can chmod their own home directory, but this is not really recommended.
    It's better that they should make a restricted sub-directory for any
    restricted content. That way they can create directories inside their
    home directory with permissions such that they allow collaboration with
    whichever group is appropriate.

    Andrew McNaughton 

    --
No added Sugar.  Not tested on animals.  May contain traces of Nuts.  If
irritation occurs, discontinue use.
-------------------------------------------------------------------
Andrew McNaughton           Living in a shack in Tasmania
andrew@scoop.co.nz          Between the bush and the sea
Mobile: +61 422 753 792     http://staff.scoop.co.nz/andrew/cv.doc
                             http://www.scoop.co.nz/
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Bill Moran: "Re: Default permissions of /home/user.."

    Relevant Pages

    • Re: How to install (real) VNC Server on Solaris 9?
      ... > xsetroot -solid grey ... You are assumed to be in you home directory, ... And what that does is to create a file name xstartup in ~/.vnc ... you will make the file executable using chmod ...
      (comp.unix.solaris)
    • Making chmod changes static
      ... and the cdrom (acd0) usable by any user without having to use 'sudo' or go ... creating a mount point in the user's home directory. ... At that time, the 'chmod' values are ...
      (freebsd-questions)
    • Re: Adding a new hard drive
      ... 'me' won't be able to write to their home directory in ... What was the point of chmod when /local2 will get the permissions of the ... At this point your chmod and chown were overridden by whatever ownership ... is without consent and is in direct breach of the Data Protection Act ...
      (alt.os.linux.suse)
    • Re: Privleges and Write problem
      ... >> access to your home directory, ... >> apps and daemons. ... That's a much less radical approach than chmod 700. ...
      (alt.os.linux.suse)
    • Re: Possible system breach due to an improper command
      ... As stated in anther thread this is a very silly use of chmod. ... lock you out of your own home directory and will ... try to lock the directoy one level up as well. ... ]Well, the next thing I know I am out of my locked shell and in root, ...
      (comp.unix.admin)