Re: chmod, or better solutions ?

2008-10-13 Thread Juha Tuuna
Jochen Schulz wrote: The only idea that pops into my mind would be chroots for every user. But I don't see a point in doing that. Maybe just one chroot with absolute minimal software available for all users or perhaps use ${YOUR_FAVOURITE_VIRTUALIZATION_SOFTWARE_HERE}? -- Juha Tuuna -- To

Re: chmod, or better solutions ?

2008-10-13 Thread Sjoerd Hardeman
Shams Fantar wrote: Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. Regards, Isn't it enough to just secure the home dirs? You

chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. Regards, -- http://snurf.info Civil Engineering section project :

Re: chmod, or better solutions ?

2008-10-12 Thread Jochen Schulz
Shams Fantar: I'd like to know if it's very fine and clean to chmod -R 700 / ; This will prevent non-root users from reading *any* file on the system. If user 'shams' wants to list his home directory /home/shams, he has to have permissions to list / and /home as well. Or are there any

Re: chmod, or better solutions ?

2008-10-12 Thread Eugene V. Lyubimkin
Shams Fantar wrote: Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. No, this is definitely wrong approach - risk to get broken

Re: chmod, or better solutions ?

2008-10-12 Thread Osamu Aoki
On Sun, Oct 12, 2008 at 03:56:09PM +0200, Shams Fantar wrote: Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. Most likely it is

Re: chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Osamu Aoki wrote: On Sun, Oct 12, 2008 at 03:56:09PM +0200, Shams Fantar wrote: Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home

Re: chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Eugene V. Lyubimkin wrote: Shams Fantar wrote: Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. No, this is definitely

Re: chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Jochen Schulz wrote: Shams Fantar: I'd like to know if it's very fine and clean to chmod -R 700 / ; This will prevent non-root users from reading *any* file on the system. If user 'shams' wants to list his home directory /home/shams, he has to have permissions to list / and /home

Re: chmod, or better solutions ?

2008-10-12 Thread John Hasler
Shams Fantar writes: I'd like to know if it's very fine and clean to chmod -R 700 / That would be a very, very, very bad idea. It would cripple your system and you would probably end up reinstalling. My purpose beeing that local users can't access/read any file which isn't in their own home

Re: chmod, or better solutions ?

2008-10-12 Thread Ron Johnson
On 10/12/08 08:56, Shams Fantar wrote: Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. As others have said, this is pretty much

Re: chmod, or better solutions ?

2008-10-12 Thread Eduardo M KALINOWSKI
John Hasler wrote: Shams Fantar writes: My purpose beeing that local users can't access/read any file which isn't in their own home directory. Then they would not be able to run any programs. What are you trying to achieve? You can easily arrange for them not to be able to access

Re: chmod, or better solutions ?

2008-10-12 Thread Chris Bannister
On Sun, Oct 12, 2008 at 03:56:09PM +0200, Shams Fantar wrote: Hi all, I'd like to know if it's very fine and clean to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. So they can't ls