linuxmuster / linuxmuster-linuxclient7

The new approach on connecting linuxclients to the Linuxmuster.net v7 Active Directory server.
3 stars 5 forks source link

Feat: Change umask of homedir to 077 #44

Open dorianim opened 2 years ago

dorianim commented 2 years ago

This changes the umask of userhomes to 077 (Permissions will be 700 respectively) to prevent other users from accessing their data. The default is 022 which makes it possible for users to access other users data if they know the explicit path. See:

@kiarn @PLanB2008 do you see any unwanted implications of this?

codeclimate[bot] commented 2 years ago

Code Climate has analyzed commit 4687547f and detected 0 issues on this pull request.

View more on Code Climate.

kiarn commented 2 years ago

Hello,

It's surely a good point, but we must test it and wait on feedback from test users. Teachers can access the students data via shares, so this change should not have bad consequences. I will also test it in my environment.

Arnaud