Subject: Re: /root permissions
To: Miroslav Urbanek <m.urbanek@sh.cvut.cz>
From: David Maxwell <david@vex.net>
List: netbsd-users
Date: 02/14/2003 22:09:15
On Sat, Feb 15, 2003 at 01:19:35AM +0100, Miroslav Urbanek wrote:
> On Fri, Feb 14, 2003 at 05:39:35PM -0500, leam wrote:
> >
> > Here's a few we use.
> > 1. Login as an unpriv user and store data there. Other non-privs
> > should not be able to read them, and most systems shouldn't have users on
> > them anyway. And you should not put critical stuff there, either.
>
> So why have dirs in /home the same default permissions (0755) as /root, if
> they are for storing private data?
On most systems with more than one user, the users work for a common
goal - company, project, whatever, and sharing information is more
useful than having to ask someone for a copy of their .login, etc...
Additionally, many systems don't have more than a handful of users.
If you're running a shell server, for people who don't know how to
protect their own files, consider changing the defaults, by setting them
in /etc startup files, or the /etc/skel files that users get when their
account is created.
--
David Maxwell, david@vex.net|david@maxwell.net -->
An organization gets what it rewards.
- Perry Metzger