Very Computer

What is the proper way of setting the permissions in home directories? I
would like to have all the home directories readable/writable/executable by the
owners (600), but anything under the public dirs readable by everybody
(how about w+x ?). Would this be a good and secure practice?

Thanks.

Permitions on home directories should normally be one of
700, 750, 755. The users umask should be one of 077, 027,
022. The RedHat default of 002 only makes sense when you
create singleuser groups, and BTW will give you trouble
when trying to set up an authorized_keys file for ssh.

Personally I prefer a umask of 077 and then change
permitions whenever someone needs more access. The safest
for a homedirectory probably is 700, but if anybody else
need access to any files inside you will need to change
it.

--
Kasper Dupont

Quote:> Personally I prefer a umask of 077 and then change permitions whenever
> someone needs more access. The safest for a homedirectory probably is
> 700, but if anybody else need access to any files inside you will need to
> change it.

    chmod -R og= ~
    chmod 711 ~ ~/bin
    chmod -R og+rX ~/public_html ~/.plan ~/.forward ~/bin/*
    umask 077

So much so, I've even got

 | zsh, potato  2:46PM piglet % alias perm
 | perm='chmod -R og+rX '

to allow me to undo the effects of the umask with slightly fewer key-
presses.

Never had any permission problems yet ;8)

~Tim
--

Through the paths of the redeemed           |http://spodzone.org.uk/