Vulnerability Development mailing list archives

Re: ssh quirks...


From: lamont () SECURITY HP COM (LaMont Jones)
Date: Mon, 27 Dec 1999 15:24:18 -0700


This is standard unix behaviour.  if a user's home directory path isn't
readable by that user, they can't access it.  typically the /home dir should
be world readable  as should the / dir.  home directories can be any
permissions a user wants and should be owned by the user themselves.

Minor nit:
Read access (to a directory) is needed to list it.  Execute access is
needed to access things in it.  You can log in with a home directory
that is mode 100, but you won't be able to get anything out of ls...

If, for whatever insane reason, you don't want your users knowing anyone
else's home directory, you can remove world read perms from /etc/passwd,
and make /home mode 511.  Not that anyone would recommend that...

lamont


Current thread: