From owner-freebsd-questions@FreeBSD.ORG Wed Sep 15 11:34:12 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B21F916A4CE for ; Wed, 15 Sep 2004 11:34:12 +0000 (GMT) Received: from smtp.infracaninophile.co.uk (ns0.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 391DE43D55 for ; Wed, 15 Sep 2004 11:34:11 +0000 (GMT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost.infracaninophile.co.uk [IPv6:::1])i8FBY64S025420 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 15 Sep 2004 12:34:06 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)i8FBY5hF025419; Wed, 15 Sep 2004 12:34:05 +0100 (BST) (envelope-from matthew) Date: Wed, 15 Sep 2004 12:34:05 +0100 From: Matthew Seaman To: Dick Davies Message-ID: <20040915113405.GB25183@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , Dick Davies , freebsd-questions@freebsd.org References: <003101c49aa2$f817b820$2a88ebd5@Vanovci> <20040915085708.GB23645@happy-idiot-talk.infracaninophile.co.uk> <20040915102445.GA13170@lb.tenfour> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="JP+T4n/bALQSJXh8" Content-Disposition: inline In-Reply-To: <20040915102445.GA13170@lb.tenfour> User-Agent: Mutt/1.4.2.1i X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.5.6 (smtp.infracaninophile.co.uk [IPv6:::1]); Wed, 15 Sep 2004 12:34:06 +0100 (BST) X-Virus-Scanned: clamd / ClamAV version devel-20040904, clamav-milter version 0.75l on smtp.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.64 X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on happy-idiot-talk.infracaninophile.co.uk cc: freebsd-questions@freebsd.org Subject: Re: /root default permisions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Sep 2004 11:34:12 -0000 --JP+T4n/bALQSJXh8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Sep 15, 2004 at 11:24:45AM +0100, Dick Davies wrote: > * Matthew Seaman [0956 09:56]: > > On Tue, Sep 14, 2004 at 11:36:59PM +0200, Martin Vana wrote: > >=20 > > > I installed FBSD 5.3 Beta 3 - Default install, and as a regular user > > > I can 'cat /root/.cshrc' or any other file in admin's directory? > > > is it a bug? > >=20 > > No, that's not wrong. The /root directory should be mode 755, which > > means anyone can chdir to it, or list the contents. >=20 > s/should/is/ >=20 > Is there any reason why it should be like this? 'should' in the sense that is the way you should expect sysinstall(8) to leave it on a freshly installed system. There's no general reason for it to be given any more restrictive permissions than that. However you are certainly free to put more[1] restrictive permissions on your /root if you wish. It depends if you put anything in that directory which you don't want other people to read. Cheers, Matthew [1] Or less restrictive if you absolutely really must -- but that would be a rather dumb move. Allowing anyone to write to /root other than the superuser is asking to get bitten by a trojan horse. --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --JP+T4n/bALQSJXh8 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQFBSCitiD657aJF7eIRAgzIAJ9zxi+15tDhFyIWAiue+enO6wRqqACfYXS8 GZ8FSsU9Bso7SRIR6QkdWpg= =hQ5i -----END PGP SIGNATURE----- --JP+T4n/bALQSJXh8--