Re: chmod, or better solutions ?

[Sjoerd Hardeman <sjoerd@lorentz.leidenuniv.nl>]

Shams Fantar wrote:
> Hi all,
>
> I'd like to know if it's very fine and "clean" to chmod -R 700 / ; Or
> are there any better solutions ? My purpose beeing that local users
> can't access/read any file which isn't in their own home directory.
>
> Regards,
Isn't it enough to just secure the home dirs? You probably want the 
users to execute programs in /usr. Then I would just do
find /home -type d -exec chmod 700 {} \;
find /home -type f -exec chmod 600 {} \;
so that all files in /home are only accessible to the user. Then, of 
course, you need to change the default umask to 0077 to make sure all 
new files have the right permissions.

Sjoerd

Attachment: signature.asc
Description: OpenPGP digital signature