Home folders security

[René v Amerongen]

Hi

Just curious about this as an issue, because it finaly happened  
( again ).

A employee, did change, to help someone, .bash_profile from the other  
user.
Some like making an alias for LS -als to just a ls call.

A long time back I did change the privileges from those hidden files  
to the user and the system.

But as new files are created they where back to x4all.

Also when a user log in with afp into the users map, he/she can  
changes things.

I dont like that, I think this a security issue. Am I right or am I  
seeing spooks? Should I file a bug?

I did search the list for opinions and solutions, but to no avail.

Are there opinions about this, and easy solutions?

RvA