[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: adduser default for sgid home directories



Matt Barry <matt@hazelmollusk.org> writes:

>> - why has a change been made
>
> I think this is explained in excruciating detail.  The short version
> (from NEWS):
>
> "mode 0700 provides both the most secure, unsurprising default"

This is a self-referencing explanation.  It provides no value.  It's
only good if you already understand (and agree) that 0700 is more secure.

And the claim that this is "most unsurprising" (less surprising?) is
obviously false. "No change" is always less surprising than any change,
whatever the rationale is.


Bjørn


Reply to: