Re: chmod, or better solutions ?

2008-10-13 Thread Sjoerd Hardeman
Shams Fantar wrote: Hi all, I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. Regards, Isn't it enough to just secure the home dirs? You pr

Re: chmod, or better solutions ?

2008-10-13 Thread Juha Tuuna
Jochen Schulz wrote: > The only idea that pops into my mind would be chroots for every user. > But I don't see a point in doing that. Maybe just one chroot with absolute minimal software available for all users or perhaps use ${YOUR_FAVOURITE_VIRTUALIZATION_SOFTWARE_HERE}? -- Juha Tuuna -- T

Re: chmod, or better solutions ?

2008-10-12 Thread Chris Bannister
On Sun, Oct 12, 2008 at 03:56:09PM +0200, Shams Fantar wrote: > Hi all, > > I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or > are there any better solutions ? My purpose beeing that local users > can't access/read any file which isn't in their own home directory. So they can

Re: chmod, or better solutions ?

2008-10-12 Thread Eduardo M KALINOWSKI
John Hasler wrote: > Shams Fantar writes: > >> My purpose beeing that local users can't access/read any file which isn't >> in their own home directory. >> > > Then they would not be able to run any programs. What are you trying to > achieve? You can easily arrange for them not to be able

Re: chmod, or better solutions ?

2008-10-12 Thread Ron Johnson
On 10/12/08 08:56, Shams Fantar wrote: Hi all, I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. As others have said, this is pretty much

Re: chmod, or better solutions ?

2008-10-12 Thread John Hasler
Shams Fantar writes: > I'd like to know if it's very fine and "clean" to chmod -R 700 / That would be a very, very, very bad idea. It would cripple your system and you would probably end up reinstalling. > My purpose beeing that local users can't access/read any file which isn't > in their own h

Re: chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Jochen Schulz wrote: > Shams Fantar: > >> I'd like to know if it's very fine and "clean" to chmod -R 700 / ; >> > > This will prevent non-root users from reading *any* file on the system. > > If user 'shams' wants to list his home directory /home/shams, he has to > have permissions to list

Re: chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Eugene V. Lyubimkin wrote: > Shams Fantar wrote: > >> Hi all, >> >> I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or >> are there any better solutions ? My purpose beeing that local users >> can't access/read any file which isn't in their own home directory. >> > No, th

Re: chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Osamu Aoki wrote: > On Sun, Oct 12, 2008 at 03:56:09PM +0200, Shams Fantar wrote: > >> Hi all, >> >> I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or >> are there any better solutions ? My purpose beeing that local users >> can't access/read any file which isn't in their own

Re: chmod, or better solutions ?

2008-10-12 Thread Osamu Aoki
On Sun, Oct 12, 2008 at 03:56:09PM +0200, Shams Fantar wrote: > Hi all, > > I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or > are there any better solutions ? My purpose beeing that local users > can't access/read any file which isn't in their own home directory. Most likely

Re: chmod, or better solutions ?

2008-10-12 Thread Eugene V. Lyubimkin
Shams Fantar wrote: > Hi all, > > I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or > are there any better solutions ? My purpose beeing that local users > can't access/read any file which isn't in their own home directory. No, this is definitely wrong approach - risk to get br

Re: chmod, or better solutions ?

2008-10-12 Thread Jochen Schulz
Shams Fantar: > > I'd like to know if it's very fine and "clean" to chmod -R 700 / ; This will prevent non-root users from reading *any* file on the system. If user 'shams' wants to list his home directory /home/shams, he has to have permissions to list / and /home as well. > Or are there any b

chmod, or better solutions ?

2008-10-12 Thread Shams Fantar
Hi all, I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or are there any better solutions ? My purpose beeing that local users can't access/read any file which isn't in their own home directory. Regards, -- http://snurf.info "Civil Engineering section" project : http://civil-e