[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: FTP/User access, was: Re: [users] Re: Why can't I?



On Wed, Jun 13, 2001 at 07:39:21PM +0200, Auke van der Gaast wrote:
| >By default (and quite naturally)
| > users _can't_ see someone else's home directory unless that person
| > explicitly makes it readable.
| 
| Well, maybe that's the problem... because they _can_ see others' 
| homedir, don't know why, but it's true. I've used adduser to create 
| the users. Thought that should be alright...

Home dirs should have "711" as the permissions (owner
read-write-execute group and world execute only).  I just checked on
my system (I am really the only user right now) and the perms are 755
(actually I'm not sure what the 's' in the 010 column is (group
execute)).  I think this is a bug in adduser/useradd (whichever one is
the Debian-specific) and should be fixed.

Do this :

(the '#' prompt implies the user is root)
# cd /home
# chmod 711 *
# ls -ld *

and verify that the perms are :

drwx--x--x


The "execute" on directories means they can 'cd', but the lack of
'read" means they can't "ls".  The execute is needed if they are
allowed to have personal web sites which are typically rooted at
~/public_html.

HTH,
-D



Reply to: