Re: Newbie administrator

[Colin Watson <cjwatson@debian.org>]

On Thu, Feb 27, 2003 at 08:05:18AM +0800, Robert Storey wrote:
> On Wed, 26 Feb 2003 15:13:59 -0500 (EST)
> Mike Dresser <mdresser_l@windsormachine.com> wrote:
> > On Wed, 26 Feb 2003, Phil wrote:
> > > do I have to do this individually for each user? (all 120 of them)  is
> > > there a way to do this in the skel directory in. the future
> > 
> > Well, set it for one user, and see if others can get into the directory or
> > not.  If not, you can do a
> > 
> > chmod 700 *
> > 
> > while in /home, and it will set all directories to drwx------
> > permissions.
> 
> Considering all the subdirectories in /home, it would probably be
> better to do this:
> 
>   chmod -R 700 /home/*

Ugh. That turns ordinary files in people's home directories into
executables!

There should be no need to apply the restrictive permissions to
subdirectories too, because once execute permission is withheld on a
parent directory you can't get to the subdirectories anyway. Mike's
suggestion should be quite sufficient.

Cheers,

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]