On Sat, Jul 13, 2013 at 3:47 PM, lee <l...@yun.yagibdah.de> wrote:
>> chmod 755 /home
>>
>> But what about
>>
>> /home/psmith
>
> It depends on what you want.  There is some tradition that home
> directories are readable for everyone and writable for their owners
> only.  It may be a good idea to make them readable for their owners only
> --- or a bad idea like when you're exporting directories in homes
> through apache (which I think is a very bad idea).
>
> In case you have users in groups that need to access someones home
> directory, you may want to allow group access.  When you have convoluted
> requirements, you may want to use ACLs to accomplish what you need ...

Thanks, Lee. I have done the following:

chmod 755 /home
chown psmith /home/psmith
chmod -R u=rwx,g=,o= /home/psmith

I hope those have left my system secure!

Paul
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Reply via email to