sous-chefs / users

Development repository for the users cookbook
https://supermarket.chef.io/cookbooks/users
Apache License 2.0
138 stars 218 forks source link

User owns their homedir group #457

Closed TheREK3R closed 3 years ago

TheREK3R commented 3 years ago

Description

Instead of root, the users primary group will be the group owner of their generated .ssh/* files. Allows a user to specify their home directory's file permissions.

Issues Resolved

None

Check List

TheREK3R commented 3 years ago

Specefically I am looking for input on who should own a users home directory, and if a user group should be created across all OSs where the no_user_group key is false, or limited to OSs where a user group is typically generated.

Should the user's username group/default group own their homedir except when no_user_group is true? Should the directory be owned by the users primary group? Should It stay as root? In the OSL's cookbooks, when they were created by the user cookbook, in some cases our home directorys had the group sticky bit set, this would be bad if the wrong group is specefied. I think this is a case where the primary group should be the owner over the username group but I could see alternate cases here as well.

kitchen-porter commented 3 years ago

Released as: 7.1.0