summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-discuss/20111212/006062.html
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-discuss/20111212/006062.html')
-rw-r--r--zarb-ml/mageia-discuss/20111212/006062.html84
1 files changed, 84 insertions, 0 deletions
diff --git a/zarb-ml/mageia-discuss/20111212/006062.html b/zarb-ml/mageia-discuss/20111212/006062.html
new file mode 100644
index 000000000..15a148c4e
--- /dev/null
+++ b/zarb-ml/mageia-discuss/20111212/006062.html
@@ -0,0 +1,84 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-discuss] Home directory permissions
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Home%20directory%20permissions&In-Reply-To=%3C201112120344.52925.cooker%40solbu.net%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="006061.html">
+ <LINK REL="Next" HREF="006064.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-discuss] Home directory permissions</H1>
+ <B>Johnny A. Solbu</B>
+ <A HREF="mailto:mageia-discuss%40mageia.org?Subject=Re%3A%20%5BMageia-discuss%5D%20Home%20directory%20permissions&In-Reply-To=%3C201112120344.52925.cooker%40solbu.net%3E"
+ TITLE="[Mageia-discuss] Home directory permissions">cooker at solbu.net
+ </A><BR>
+ <I>Mon Dec 12 03:44:49 CET 2011</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="006061.html">[Mageia-discuss] Home directory permissions
+</A></li>
+ <LI>Next message: <A HREF="006064.html">[Mageia-discuss] Home directory permissions
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#6062">[ date ]</a>
+ <a href="thread.html#6062">[ thread ]</a>
+ <a href="subject.html#6062">[ subject ]</a>
+ <a href="author.html#6062">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>On Monday 12 December 2011 03:19, Jeff Robins wrote:
+&gt;<i> Can I safely change the permissions to '700'?
+</I>
+Sure, but in a minute or so msec may revert the changes.
+
+I would change it in /etc/security/msec/perms.conf (Perhaps /etc/security/msec/perm.local can be used) and run msecperms afterwards.
+===
+/home/* current.current 700
+===
+Then msec will from now on automatically enforce the permissions to what you want.
+(Note: The spaces between the tree fields are TABs in my file, and not spaces. Also, &quot;current.current&quot; means that msec wont change the owner of files and folders. In /home/ you really don't want msec to automatically change ownership of files, or yourt users will be angry :-)= )
+
+To get a grasp of some of the currently forced entries and what you can do, look in the various config files in /etc/security/msec/.
+If you have the default security level, the *.standard are the files you want to look into. (I think) &quot;*.local&quot; overrides the default values.
+
+I use this to enforce customized access restrictions on a couple of programs, so the few users who have access to my gateway don't have access to telnet and nmap unless they are members of a special group that I've setup.
+
+--
+Johnny A. Solbu
+PGP key ID: 0xFA687324
+-------------- next part --------------
+A non-text attachment was scrubbed...
+Name: not available
+Type: application/pgp-signature
+Size: 189 bytes
+Desc: This is a digitally signed message part.
+URL: &lt;/pipermail/mageia-discuss/attachments/20111212/15da735e/attachment.asc&gt;
+</PRE>
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="006061.html">[Mageia-discuss] Home directory permissions
+</A></li>
+ <LI>Next message: <A HREF="006064.html">[Mageia-discuss] Home directory permissions
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#6062">[ date ]</a>
+ <a href="thread.html#6062">[ thread ]</a>
+ <a href="subject.html#6062">[ subject ]</a>
+ <a href="author.html#6062">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-discuss">More information about the Mageia-discuss
+mailing list</a><br>
+</body></html>