Date: Wed, 15 Sep 2004 12:34:05 +0100 From: Matthew Seaman <m.seaman@infracaninophile.co.uk> To: Dick Davies <rasputnik@hellooperator.net> Cc: freebsd-questions@freebsd.org Subject: Re: /root default permisions Message-ID: <20040915113405.GB25183@happy-idiot-talk.infracaninophile.co.uk> In-Reply-To: <20040915102445.GA13170@lb.tenfour> References: <003101c49aa2$f817b820$2a88ebd5@Vanovci> <20040915085708.GB23645@happy-idiot-talk.infracaninophile.co.uk> <20040915102445.GA13170@lb.tenfour>
next in thread | previous in thread | raw e-mail | index | archive | help
--JP+T4n/bALQSJXh8
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, Sep 15, 2004 at 11:24:45AM +0100, Dick Davies wrote:
> * Matthew Seaman <m.seaman@infracaninophile.co.uk> [0956 09:56]:
> > On Tue, Sep 14, 2004 at 11:36:59PM +0200, Martin Vana wrote:
> >=20
> > > I installed FBSD 5.3 Beta 3 - Default install, and as a regular user
> > > I can 'cat /root/.cshrc' or any other file in admin's directory?
> > > is it a bug?
> >=20
> > No, that's not wrong. The /root directory should be mode 755, which
> > means anyone can chdir to it, or list the contents.
>=20
> s/should/is/
>=20
> Is there any reason why it should be like this?
'should' in the sense that is the way you should expect sysinstall(8)
to leave it on a freshly installed system.
There's no general reason for it to be given any more restrictive
permissions than that. However you are certainly free to put more[1]
restrictive permissions on your /root if you wish. It depends if you
put anything in that directory which you don't want other people to
read.
Cheers,
Matthew
[1] Or less restrictive if you absolutely really must -- but that
would be a rather dumb move. Allowing anyone to write to /root other
than the superuser is asking to get bitten by a trojan horse.
--=20
Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks
Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614 Bucks., SL7 1TH UK
--JP+T4n/bALQSJXh8
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)
iD8DBQFBSCitiD657aJF7eIRAgzIAJ9zxi+15tDhFyIWAiue+enO6wRqqACfYXS8
GZ8FSsU9Bso7SRIR6QkdWpg=
=hQ5i
-----END PGP SIGNATURE-----
--JP+T4n/bALQSJXh8--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040915113405.GB25183>