Big Hole

[Colin Watson]

On Mon, Feb 07, 2005 at 09:58:57PM -0500, Ron Peterson wrote:
> On Mon, Feb 07, 2005 at 07:45:42PM +0000, Colin Watson wrote:
> > On Mon, Feb 07, 2005 at 07:33:11PM +0000, baza wrote:
> > > I think I've found a security hole in my Hoary box.
> > > 
> > > Without changing any of the default permissions a user on a multi-user 
> > > box can see the files in an other persons Home directory????
> > 
> > That's a feature, not a bug. (It's awkward for users to share files
> > otherwise, which is a frequent use of a multi-user box.) If you want a
> > private directory inside which other users can't see, use 'chmod o-rwx'
> > to make other users have no permissions on it.
> 
> Does /root want to share also?

System administrators of multi-user boxes should be capable of deciding
what they want to do. We don't present /root for desktop users.

-- 
Colin Watson                                       [cjwatson at ubuntu.com]