…

Saturday, 27th April 2024

Comment posted How to configure Debian to create new added users through adduser to be secure by default / Limiting access to other user’s information by .

Recent comments by

Share this on:


Previoust Post:

Next Post:

Tags:

This entry was posted on Saturday, April 27th, 2024 at 4:07 am and is filed under Computer Security, Linux, System Administration. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

No Responses to “…”

  1. Anders says:
    August 3, 2010 at 9:14 pm
    Opera 10.61 Opera 10.61 GNU/Linux x64 GNU/Linux x64
    Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.6.30 Version/10.61

    Should it not be chmod -R 750 /root, or chmod -R o-rx /root

    View CommentView Comment
    Reply
  2. Kura says:
    August 3, 2010 at 9:36 pm
    Google Chrome 6.0.472.14 Google Chrome 6.0.472.14 Windows 7 Windows 7
    Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.14 Safari/534.3

    Surely you mean the following:

    debian:~# chmod -R 750 /root
    debian:~# for i in /home/*; do echo chmod -R 750 $i;

    View CommentView Comment
    Reply
    • admin says:
      August 4, 2010 at 1:45 pm
      Epiphany 2.29.92 Epiphany 2.29.92 Debian GNU/Linux x64 Debian GNU/Linux x64
      Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Safari/531.2+ Debian/squeeze/sid () Epiphany/2.29.92

      yes in the hurry it seems I put a wrong number 🙂

      View CommentView Comment
      Reply
  3. bbartlomiej says:
    August 3, 2010 at 10:55 pm
    Opera 10.60 Opera 10.60 Windows 7 Windows 7
    Opera/9.80 (Windows NT 6.1; U; pl) Presto/2.6.30 Version/10.60

    Your chmods shoul be 750 not 755, because it wouldn’t change anything 🙂

    View CommentView Comment
    Reply
  4. Debianero Rumbero says:
    August 3, 2010 at 11:28 pm
    IceWeasel 3.5.10 IceWeasel 3.5.10 GNU/Linux GNU/Linux
    Mozilla/5.0 (X11; U; Linux i686; es-ES; rv:1.9.1.10) Gecko/20100623 Iceweasel/3.5.10 (like Firefox/3.5.10)

    ‘I have no clear clue why the Debian development team has taken the decision to set such an insecure permissions by default,’

    I do believe that’s a heritage thing from umask=0022 times.

    I always change /etc/adduser.conf too (like you) AND umask settings.

    In your example debian:~# chmod -R 755 /root I think that’s a typo, isn’t?

    Maybe you mean debian:~# chmod -R 750 /root

    Same thing to your second example (755 instead 750).

    View CommentView Comment
    Reply
    • admin says:
      August 4, 2010 at 1:44 pm
      Epiphany 2.29.92 Epiphany 2.29.92 Debian GNU/Linux x64 Debian GNU/Linux x64
      Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Safari/531.2+ Debian/squeeze/sid () Epiphany/2.29.92

      yes it’s a type thanks for noting it!
      Best

      View CommentView Comment
      Reply
  5. tw says:
    August 4, 2010 at 5:35 am
    Firefox 3.6.8 Firefox 3.6.8 Windows XP Windows XP
    Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8

    “for i in /home/*; do echo chmod -R 755 $i; done “

    I guess it should be chmod -R 700 in the script.

    View CommentView Comment
    Reply
  6. anon says:
    August 9, 2010 at 5:13 pm
    Firefox 3.6.7 Firefox 3.6.7 Fedora 13 x64 Fedora 13 x64
    Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.7) Gecko/20100723 Fedora/3.6.7-1.fc13 Firefox/3.6.7

    Old bug “/root is world readable”:
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295858

    View CommentView Comment
    Reply
  7. anon says:
    August 9, 2010 at 5:28 pm
    Firefox 3.6.7 Firefox 3.6.7 Fedora 13 x64 Fedora 13 x64
    Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.7) Gecko/20100723 Fedora/3.6.7-1.fc13 Firefox/3.6.7

    I think it’s wrong to recursively change the ownerships on people’s files. You should only change the permissions on their home directory.

    View CommentView Comment
    Reply
    • admin says:
      August 10, 2010 at 11:33 am
      Epiphany 2.29.92 Epiphany 2.29.92 Debian GNU/Linux x64 Debian GNU/Linux x64
      Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Safari/531.2+ Debian/squeeze/sid () Epiphany/2.29.92

      Guess you’re right but yet, if only the users directory permissions are changed somebody could try to guess the user files and he will be able to read them if he is lucky. Thus it might be better that way sometimes.

      View CommentView Comment
      Reply
  8. admin says:
    August 10, 2010 at 12:31 pm
    Epiphany 2.29.92 Epiphany 2.29.92 Debian GNU/Linux x64 Debian GNU/Linux x64
    Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/531.2+ (KHTML, like Gecko) Safari/531.2+ Debian/squeeze/sid () Epiphany/2.29.92

    Yep I just gave it a try, You’re right. the “-R” option is not necessary in the for loop. I’ve fixed that in the article.

    Thanks for noting it!

    Will be seeing you around,

    Wish you best!

    Georgi

    View CommentView Comment
    Reply
  9. elektrische zigarette says:
    December 6, 2010 at 3:18 pm
    Internet Explorer 5.5 Internet Explorer 5.5 Windows NT 4.0 Windows NT 4.0
    Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)

    hey orada gday þekilde ailesine vereceðiz site . Seçilmisl?r? fark I anybody hansi site haqqinda bir . !

    View CommentView Comment
    Reply
  10. Domenica Tinnell says:
    September 22, 2012 at 7:19 pm
    Firefox 3.5.3 Firefox 3.5.3 Windows XP Windows XP
    Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)

    If some one needs to be updated with newest technologies after that he must be go to see this site and be up to date every day.

    View CommentView Comment
    Reply