Subject: Re: /root permissions
To: Miroslav Urbanek <m.urbanek@sh.cvut.cz>
From: David Maxwell <david@vex.net>
List: netbsd-users
Date: 02/14/2003 22:09:15
On Sat, Feb 15, 2003 at 01:19:35AM +0100, Miroslav Urbanek wrote:
> On Fri, Feb 14, 2003 at 05:39:35PM -0500, leam wrote:
> > 
> > Here's a few we use.
> > 	1. Login as an unpriv user and store data there. Other non-privs 
> > 	should not be able to read them, and most systems shouldn't have users on 
> > them anyway. And you should not put critical stuff there, either.
> 
> So why have dirs in /home the same default permissions (0755) as /root, if
> they are for storing private data?

On most systems with more than one user, the users work for a common
goal - company, project, whatever, and sharing information is more
useful than having to ask someone for a copy of their .login, etc...

Additionally, many systems don't have more than a handful of users.

If you're running a shell server, for people who don't know how to
protect their own files, consider changing the defaults, by setting them
in /etc startup files, or the /etc/skel files that users get when their
account is created.

-- 
David Maxwell, david@vex.net|david@maxwell.net -->
An organization gets what it rewards.
			      - Perry Metzger