Date: Sat, 23 Oct 2004 16:03:15 +0100 (BST) From: Robert Watson <rwatson@freebsd.org> To: Jesper Wallin <jesper@hackunite.net> Cc: freebsd-security@freebsd.org Subject: Re: Default permissions of /home/user.. Message-ID: <Pine.NEB.3.96L.1041023160159.59894D-100000@fledge.watson.org> In-Reply-To: <1323.213.112.198.199.1098388008.squirrel@mail.hackunite.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 21 Oct 2004, Jesper Wallin wrote: > I've asked this question before without getting any further help > really.. When a new user is added using "adduser" on 5.x (havn't really > checked if it's the same under 4.x or not), the default homedir > permission is 755 (drwxr-xr-x) which to me, looks a bit insecure? It's > of course pretty easy to solve it by a simple chmod, but yet, isn't > there anyway to change the default chmod value? Last time I asked about > this, people told me to check out the skel directory, but the only thing > you can do in there is to change the default chmod value of the > files/directories _in_ the homedir, not the chmod values of the actually > homedir.. I would be glad if someone could give me further assistanse > how do solve this without manually modifying the "adduser" script.. and > if it this option doesn't exist, shouldn't it be added or is it just me > who want my homedir secure from other users? ;) I'm a fan of creating "public", "public_html", and "private" directories in the user's home directory when their account is created, with appropriate permissions. That way I can just tell users "put the file in your private directory if you want it to be private". I use custom scripts for accounts here, but you may just be able to create those prototype directories in skel and have adduser do the right thing. Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Principal Research Scientist, McAfee Research
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1041023160159.59894D-100000>