Home folders security

Alex Satrapa grail at goldweb.com.au
Mon Oct 15 16:12:44 PDT 2007


On 15/10/2007, at 19:51 , René v Amerongen wrote:

> A employee, did change, to help someone, .bash_profile from the  
> other user.
> Some like making an alias for LS -als to just a ls call.

Is this because the .bash_profile was writable by "everyone"?

> A long time back I did change the privileges from those hidden  
> files to the user and the system.

One thing you'll need to check is the "umask":
[alex at Lancelot]% umask
022

This umask means that the "write" permissions for "group" and  
"others" will be turned off by default.  You should be able to set  
the umask in /etc/profile.

Alex



More information about the MacOSX-admin mailing list