Bug. Home folder permissions.

[frank38]

Please,
can a user send this bug to Debian (I don't want my personal email to appear):
The home folder permissions are 0755 (drwxr-xr-x) instead of 0750 (or 0700), also for newly created users.
This means all users can read the documents of all other users without knowing their password, just changing folder is needed.
Thank you.

[4D696B65]

It's not a bug. it's been that way forever. Feel free to change the ownership of your own home.

[frank38]

This critical bug was upstreamed to Debian by Ubuntu years ago. Now Ubuntu solved this critical bug, Debian still have it.
A multi-user system shouldn't have this bug, the privacy is important.

[reinob]

It's not a bug but a design choice. Traditionally users shared (0755) stuff, but other systems preferred 0750.

In the end it's just a default, and you are free to change that, either for already existing users (using chmod), or even for new users, by setting HOME_MODE in /etc/login.defs.

EDIT: https://man7.org/linux/man-pages/man5/login.defs.5.html

It is not the umask of the user running useradd but the UMASK variable in /etc/login.defs. Sorry about that (I've edited the post, but in case anyone read that).

This is in /etc/login.defs

Code: Select all

# UMASK is the default umask value for pam_umask and is used by
# useradd and newusers to set the mode of the new home directories.
# 022 is the "historical" value in Debian for UMASK
# 027, or even 077, could be considered better for privacy
# There is no One True Answer here : each sysadmin must make up his/her
# mind.

[frank38]

bug ≠ feature

[RU55EL]

bug ≠ feature

Feature ≠ Bug

[frank38]

bug ≠ feature

Feature ≠ Bug

I don't want a distro where a bugs become features.
After ten years of Debian I can say:
Good-bye and thanks for all the fish.

[RU55EL]

I don't want a distro where a bugs become features.
After ten years of Debian I can say:
Good-bye and thanks for all the fish.

A software bug is an error, flaw or fault in computer software that causes it to produce an incorrect or unexpected result, or to behave in unintended ways.

The default permissions in the home folder are intended. It is not a mistake. You can very simply change it to whatever you like.

If the audio volume on your television is not what you would like when you turn it on is it a bug? You can easily adjust the volume control to your preferences.

If the desktop color is not to your liking, is it a bug?

If you are allowed to set the password for root to 1234, is that a security bug?