3 ms·

You know, I rarely think about this: # chmod -R go-rwx /home/* Why are most default homes setup with a mode other than 700 directories 600 files? I know, it i

You know, I rarely think about this: # chmod -R go-rwx /home/* Why are most default homes setup with a mode other than 700 directories 600 files? I know, it is because of the default mask system wide, but it seems to make sense to do this to homes, unless I am missing something?

nerdponx 4y ago
I have the same question. And why not go a step further? Set a default ACL on the home directory.
technion 4y ago
Possibly a legacy of websites with tilde home directories being the norm at one time.
doublepg23 4y ago
Funny enough Ubuntu didn’t even make that change until 2021 https://news.itsfoss.com/private-home-directory-ubuntu-21-04/ https://news.itsfoss.com/private-home-directory-ubuntu-21-04...
Arnavion 4y ago
Before UPGs, every user would have `users` or something similarly generic as their primary group, and it was intentional that everyone's homedir allowed read access to that group for the purpose of sharing files between users. With UPGs, every user will have a bespoke primary group, so having group access to the homedir is not a problem. Whether the distro still keeps the other-readable bit is up to the distro. For example, OpenSUSE used to be in the pre-UPG 0755 camp, but switched some time ago to the UPG 0700 camp. The default UPG usage and homedir permissions are controlled by USERGROUPS_ENAB and HOME_MODE in login.defs (under /etc or /usr/etc, depending on your distro).
- rascul 4y ago
  > For example, OpenSUSE used to be in the pre-UPG 0755 camp, but switched some time ago to the UPG 0700 camp. When was this? 15.4 doesn't have user per group by default, nor does it have 0700 on $HOME by default. I have several fairly recent installs around I checked. Something in Tumbleweed perhaps? My last Tumbleweed install was last year sometime and does not have user per group nor 0700 $HOME.
  - Arnavion 4y ago
    https://bugzilla.opensuse.org/show_bug.cgi?id=1182850 https://bugzilla.opensuse.org/show_bug.cgi?id=1182850 https://bugzilla.opensuse.org/show_bug.cgi?id=1189139 https://bugzilla.opensuse.org/show_bug.cgi?id=1189139 I did a new TW install in April 2022 that had UPG by default, which is how I noticed.
    - rascul 4y ago
      I got around to checking, and turns out that my Tumbleweed installs are creating new users with 0700 home directory now. I didn't think to try creating a new user in my earlier checks, I just checked the existing users I've had. New users are still 0755 home directories on 15.4 though.
      - Arnavion 4y ago
        Yes, the change was to login.defs, so new users will be affected. There's no migration for existing users, because it would be breaking.

nerdponx 4y ago

I have the same question. And why not go a step further? Set a default ACL on the home directory.

technion 4y ago

Possibly a legacy of websites with tilde home directories being the norm at one time.

doublepg23 4y ago

Funny enough Ubuntu didn’t even make that change until 2021 https://news.itsfoss.com/private-home-directory-ubuntu-21-04/ https://news.itsfoss.com/private-home-directory-ubuntu-21-04...

Arnavion 4y ago

Before UPGs, every user would have `users` or something similarly generic as their primary group, and it was intentional that everyone's homedir allowed read access to that group for the purpose of sharing files between users. With UPGs, every user will have a bespoke primary group, so having group access to the homedir is not a problem. Whether the distro still keeps the other-readable bit is up to the distro. For example, OpenSUSE used to be in the pre-UPG 0755 camp, but switched some time ago to the UPG 0700 camp. The default UPG usage and homedir permissions are controlled by USERGROUPS_ENAB and HOME_MODE in login.defs (under /etc or /usr/etc, depending on your distro).

rascul 4y ago
> For example, OpenSUSE used to be in the pre-UPG 0755 camp, but switched some time ago to the UPG 0700 camp. When was this? 15.4 doesn't have user per group by default, nor does it have 0700 on $HOME by default. I have several fairly recent installs around I checked. Something in Tumbleweed perhaps? My last Tumbleweed install was last year sometime and does not have user per group nor 0700 $HOME.
- Arnavion 4y ago
  https://bugzilla.opensuse.org/show_bug.cgi?id=1182850 https://bugzilla.opensuse.org/show_bug.cgi?id=1182850 https://bugzilla.opensuse.org/show_bug.cgi?id=1189139 https://bugzilla.opensuse.org/show_bug.cgi?id=1189139 I did a new TW install in April 2022 that had UPG by default, which is how I noticed.
  - rascul 4y ago
    I got around to checking, and turns out that my Tumbleweed installs are creating new users with 0700 home directory now. I didn't think to try creating a new user in my earlier checks, I just checked the existing users I've had. New users are still 0755 home directories on 15.4 though.
    - Arnavion 4y ago
      Yes, the change was to login.defs, so new users will be affected. There's no migration for existing users, because it would be breaking.