From owner-freebsd-security  Tue Aug 29  9:30:46 2000
Delivered-To: freebsd-security@freebsd.org
Received: from scl-ims.phoenix.com (scl-ims.phoenix.com [134.122.1.73])
	by hub.freebsd.org (Postfix) with ESMTP id 481DE37B423
	for <freebsd-security@FreeBSD.ORG>; Tue, 29 Aug 2000 09:30:41 -0700 (PDT)
Received: from allmaui.com (boxster.phoenix.com [134.122.9.179]) by scl-ims.phoenix.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
	id RHR3C342; Tue, 29 Aug 2000 09:30:35 -0700
Message-ID: <39AB836C.E5E8DA3D@allmaui.com>
Date: Tue, 29 Aug 2000 09:33:32 +0000
From: Craig Cowen <craig@allmaui.com>
X-Mailer: Mozilla 4.72 [en] (X11; I; Linux 2.2.12 i386)
X-Accept-Language: en
MIME-Version: 1.0
To: specter <ai32@drexel.edu>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: adduser perm problem
References: <00082906200900.00680@reddog.yi.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

specter wrote:

> Hello,
>
> Perhaps I am missing something, but under 4.0 and 4.1-Release,
> when adding a user via adduser, I see the perms on the created
> home directory as "drwxr-xr-x", allowing any one to cd in and
> view files.
>
> Is this normal behavior, or have I oopsed something on my
> system?
>
> Thank you for your help.
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

Just hack your adduser script to add a private directory and have it set
the perms you want.
It will save you tons of work.

Also read up on umask

Craig



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message