Debian Buster - Permission bug?

[eoflores]

Guys,

I've been searching around the forum and haven't been able to find a similar topic.

However, I wanted to point out - Has anyone notice that a guest account can see other users content?

Or is this an isolated issues related to my install?

Check your desktop install and please let me know that we do not have a permission bug.

- I'm running latest Debian Buster, KDE desktop - AMD64 8GB RAM, SSD 250GB.

[ruwolf]

It depends on your setting.
You can change access of other users to your files/directories by command chmod.
Default permissions (for newly created files) are set in shells' profiles by command umask.
wiki.debian.org: Permissions

[eoflores]

Hi,

Thanks for the reply. I'll be checking overall permissions and logs later today. I may have used chmod and forgotten about it.

[sickpig]

no
the default umask allows other users access
u need to change that in etc profle or individual user's profile files.

[cuckooflew]

There is no bug, and any user can also set their own permissons to not allow others to read or see files or directories, if they wish.

[L_V]

Code: Select all

ls -l /home/

shows that by default, user X home is readable by all users.

Code: Select all

grep user /etc/group |sed 's/^.*://'

will give the user list of group "users".
If you want to restrict access of all users to themselves only, try this:

Code: Select all

# chown -R userX:userX /home/userX

(command as root user)
or more globally if many users:

Code: Select all

# for X in `grep user /etc/group |sed 's/^.*://; s/,/ /g'` ;do echo $X ;chown -R $X:$X /home/$X ;done

Default adduser configuration is stored at /etc/adduser.conf

# If SETGID_HOME is "yes" home directories for users with their own group the setgid bit will be set.
This was the default for versions << 3.13 of adduser.
Because it has some bad side effects we no longer do this per default.
If you want it nevertheless you can still set it here.
SETGID_HOME=no