Jason
Col. Panic
Premium
join:2001-01-24
38.2967 Lat
clubs:
| I guess permissions are important.
Heh...
Was fooling around, trying to figure out why my wifes account on the Ubuntu laptop wouldn't let her login. ($home/.dmrc is being ignored yadda yadda...)
So, I chown -R /home/wife to wife, then set chmod -R 644 /home/wife
Of course, that doesnt work.
so then I try it on my user account, like an idiot.
sigh..
/home/mine is now 744, and /home/mine/.dmrc is 600, and all seems to be okay with the world, but damn if I wasnt freaking out..
Is this right? Its working now, but did I open some bad backdoors?
I guess permissions are important, Heh.
-Jason
--
A sucking chest wound is just nature's way of telling you to slow down. |
|
Sir Meowmix III
@windstream.net
 from:
Jason 
| You left your wife's home directory world readable. I'd set it to wife:wife 770 on directories and 660 on files.
|
|
JJBDUKE2004
join:2005-05-21
Columbia, MD
| reply to Jason
Permissions for directories have different meanings than for files:
read: list the contents in the directory (i.e. run ls)
write: create new files, rename or delete files in the directory
execute: access files in the folder, cd into the directory.
In the old days it was not uncommon for upload directories on ftp sites to be set write-execute: you could upload files into the folder, but couldn't see what was there (only the site admin could), but if you knew the name of the file you wanted, you could retrieve it by name. |
|
KodiacZiller
join:2008-09-04
73368
| I would set the /home/wife directory to 700 (just be sure wife owns the directory, or else you would lock her out). Unless some other user needs access to her directory, there isn't much of a reason not to use 700.
As Sir Meowmix alluded to, world readable directories are bad. World writable directories are worse, especially when talking about root owned directories (which is not the case here, so I wouldn't stress about it when talking about /home directories). |
|
stainer
join:2004-04-10
Andover, KS
 ·AT&T Southwest
| reply to Jason
They have a HowTo at ubuntuforums.org on howto fix that exact problem.
»ubuntuforums.org/showthread.php?t=976610
--
My Blog »patterson.webhop.net |
|
