[Bug 48734] Re: Home permissions too open

[Alex Murray]

Updates for adduser and shadow were both uploaded to hirsute-proposed
yesterday as per https://lists.ubuntu.com/archives/ubuntu-devel-
discuss/2021-January/018901.html:

https://launchpad.net/ubuntu/+source/shadow/1:4.8.1-1ubuntu8
https://launchpad.net/ubuntu/+source/adduser/3.118ubuntu5

shadow has already migrated to the release pocket, and with any luck
adduser will migrate soon too which should resolve this issue.

** Also affects: shadow (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: adduser (Ubuntu Hirsute)
   Importance: Medium
       Status: Opinion

** Also affects: shadow (Ubuntu Hirsute)
   Importance: Undecided
       Status: New

** Changed in: adduser (Ubuntu Hirsute)
       Status: Opinion => Fix Committed

** Changed in: shadow (Ubuntu Hirsute)
       Status: New => Fix Committed

** Changed in: shadow (Ubuntu Hirsute)
       Status: Fix Committed => Fix Released

** Changed in: shadow (Ubuntu Hirsute)
     Assignee: (unassigned) => Alex Murray (alexmurray)

** Changed in: adduser (Ubuntu Hirsute)
     Assignee: (unassigned) => Alex Murray (alexmurray)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shadow in Ubuntu.
https://bugs.launchpad.net/bugs/48734

Title:
  Home permissions too open

Status in adduser package in Ubuntu:
  Fix Committed
Status in shadow package in Ubuntu:
  Fix Released
Status in adduser source package in Hirsute:
  Fix Committed
Status in shadow source package in Hirsute:
  Fix Released
Status in Ubuntu RTM:
  Opinion

Bug description:
  Binary package hint: debian-installer

  On a fresh dapper install i noticed that the file permissons for the
  home directory for the user created by the installer is set to 755,
  giving read access to everyone on the system.

  Surely this is a bad idea? If your set on the idea can we atleast have
  a option during the boot proccess?

  Also new files that are created via the console ('touch' etc.) are
  done so with '644' permissons, is there anything that can be done
  here? nautlius seems to create files at '600', which is a better
  setting.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/adduser/+bug/48734/+subscriptions