[Bug 1131548] Re: Home directories are created with permissions that allow other users to see contents.

[Marc Deslauriers]

Thanks for taking the time to report this bug and helping to make Ubuntu better.  This is not a bug, but rather expected behavior:
https://wiki.ubuntu.com/SecurityTeam/Policies#Permissive_Home_Directory_Access

Please feel free to report any other bugs you may find.

** Information type changed from Public Security to Public

** Changed in: adduser (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to adduser in Ubuntu.
https://bugs.launchpad.net/bugs/1131548

Title:
  Home directories are created with permissions that allow other users
  to see contents.

Status in “adduser” package in Ubuntu:
  Invalid

Bug description:
  System Info:
  Ubuntu 12.10, Desktop and Server.
  ---
  What is happening:
  Home directories are created with the permissions of 0755 which allows for other users to read their contents.
  ---
  What should be happening:
  Home directories should be created with the permissions of 0700 which allows for only the owner to read their contents.
  ---
  Notes:
  This can be fixed by changing the value of DIR_MODE to 0700 in /etc/adduser.conf.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/adduser/+bug/1131548/+subscriptions