[Bug 1131548] [NEW] Home directories are created with permissions that allow other users to see contents.

[Wyatt J. Brown]

*** This bug is a security vulnerability ***

Public security bug reported:

System Info:
Ubuntu 12.10, Desktop and Server.
---
What is happening:
Home directories are created with the permissions of 0755 which allows for other users to read their contents.
---
What should be happening:
Home directories should be created with the permissions of 0700 which allows for only the owner to read their contents.
---
Notes:
This can be fixed by changing the value of DIR_MODE to 0700 in /etc/adduser.conf.

** Affects: adduser (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to adduser in Ubuntu.
https://bugs.launchpad.net/bugs/1131548

Title:
  Home directories are created with permissions that allow other users
  to see contents.

Status in “adduser” package in Ubuntu:
  New

Bug description:
  System Info:
  Ubuntu 12.10, Desktop and Server.
  ---
  What is happening:
  Home directories are created with the permissions of 0755 which allows for other users to read their contents.
  ---
  What should be happening:
  Home directories should be created with the permissions of 0700 which allows for only the owner to read their contents.
  ---
  Notes:
  This can be fixed by changing the value of DIR_MODE to 0700 in /etc/adduser.conf.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/adduser/+bug/1131548/+subscriptions