Re: chmod, or better solutions ?

[Sjoerd Hardeman]

Shams Fantar wrote:

Hi all,

I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or
are there any better solutions ? My purpose beeing that local users
can't access/read any file which isn't in their own home directory.

Regards,

Isn't it enough to just secure the home dirs? You probably want the users to execute programs in /usr. Then I would just do

find /home -type d -exec chmod 700 {} \;
find /home -type f -exec chmod 600 {} \;


Sjoerd

so that all files in /home are only accessible to the user. Then, of course, you need to change the default umask to 0077 to make sure all new files have the right permissions.

signature.asc
Description: OpenPGP digital signature