Ubuntu

/home directories are readable for everyone

Bug #96141 reported by Andi T.
2
Affects Status Importance Assigned to Milestone
Ubuntu
Won't Fix
Undecided
Kees Cook

Bug Description

All home directories (/home/* and /root) are readable for everyone, even if the owner did not explicitly allow other useres to read/list it:

$ ls -lhd /home/* /root
drwxr-xr-x 16 user1 user1 4,0K 2007-03-26 01:27 /home/user1
drwxr-xr-x 2 user2 user2 4,0K 2007-03-25 14:47 /home/user2
drwxr-xr-x 2 user3 user3 4,0K 2007-03-25 14:44 /home/user3
drwxr-xr-x 6 root root 4,0K 2007-03-26 00:26 /root

To change this for new users, I had to run: sudo dpkg-reconfigure adduser

To change this for existing users, I had to run: sudo chmod -R o= /home/* /root

Revision history for this message
Brian Murray (brian-murray) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. You reported this bug a while ago and there hasn't been any activity in recently. We were wondering if this is still and issue for you? Thanks in advance.

Revision history for this message
Brian Murray (brian-murray) wrote :

We are closing this bug report as it lacks the information, described in the previous comments, we need to investigate the problem further. However, please reopen it if you can give us the missing information and feel free to submit bug reports in the future.

Revision history for this message
Kees Cook (kees) wrote :

Hi! Thanks for the report. The default settings for home directories have been intentionally chosen to be less restrictive to allow users to share files. As Ubuntu evolves, this default may change. Currently the decision stands to choose ease-of-sharing over directory listing privacy.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.