*** This bug is a duplicate of bug 67128 ***

It's a terrible design decision. Making saring easy is good, sharing by
default is not. Please also see #67128 for arguments, why this design
decision needs to be changed (most notably: it violated "security by
default" principle).

I don't want to start a fight here, because it's easy for me to chmod
0700 for desired behaviour. But novice users may be unaware that their
home directories are shared by default. This can cause serious leaks of
sensible data (including passwords, or bank account info) which users
have put in their home directories. I strongly believe that sharing
should require explicit action (perhaps with a check box in some GUI
configuration program), which indeed makes things a bit more complex,
but not necessarily too complex for novice users.

In any case, making sharing explicit (and therefore more difficult) is
better than allowing possibility of catastrophic private data leaks.

-- 
Incorrect permissions for home directories
https://launchpad.net/bugs/63360

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to