Home Directory Question

carlosinfl · 10-04-2006, 01:04 PM

On our RHEL servers, all users can not browse other home directories except "root" obviously but when I just built this Debian server (Sarge), when I run the "adduser" command to create new users and home directories, each user can browse and view other home directories. How can I restrict this? I want each user to be locked to their home directory. I don't care if they can browse system files but writing or changing system files is another issue of course.

Code:

cwilliams@tunafish:/home$ ls -la
total 20
drwxrwsr-x   5 root      staff     4096 2006-10-04 13:56 .
drwxr-xr-x  21 root      root      4096 2006-10-03 07:13 ..
drwxr-xr-x   3 cwilliams cwilliams 4096 2006-10-04 13:57 cwilliams
drwxr-xr-x   2 dgales    dgales    4096 2006-10-04 13:56 dgales
drwxr-xr-x   2 wackley   wackley   4096 2006-10-04 13:54 wackley

cjcox · 10-04-2006, 01:42 PM

Remove the group and other bits from the home directories. You can also set the umask to 077 if you want for future file/dir creates. Actually, since you are mimicking Red Hat with the unique group names, you can merely remove the "other" bits from the directories and use a umask of 027....

chmod o= /home/*

Even with the permission bits you have, users won't be able to create or remove files inside of each other's home directories (of course, there could be more lenient permission setting on directories underneath their home dirs).