Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Apr 2001 11:27:42 -0400 (EDT)
From:      Mikhail Kruk <meshko@cs.brandeis.edu>
To:        Victor Ivanov <v0rbiz@icon.bg>
Cc:        <freebsd-security@FreeBSD.ORG>
Subject:   Re: /root and users home dir permissions
Message-ID:  <Pine.LNX.4.33.0104181057460.31356-100000@calliope.cs.brandeis.edu>
In-Reply-To: <20010418173927.A64529@icon.icon.bg>

next in thread | previous in thread | raw e-mail | index | archive | help
> Hi all,
>
> I noticed /root is installed with mode=0755 (and updated every time by
> installworld). It's the root home directory... some admins (like me) are
> using it for keeping sensitive data away from regular users. Shouldn't it
> be mode=0700 in /etc/mtree/BSD.root.dist?

I don't think changes like this can be made all of a sudden. Some people
might be using /root for something which requires it to be readable and we
don't want to break things...

> Also, when adding new users their home directories should be protected the
> same way. Am I wrong?

I strongly agree with that. This change seems to be ok in terms of
breaking existing systems and people have no business in other users'
directories.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.33.0104181057460.31356-100000>