Matthew S. Hallacy writes:
> Do you trust every single program you run to not set a file g+rw? The
> issue isn't readable home directories, it's readable files, bad
> umask, and naughty programs that write group read/write-able files.

UNIX permissions don't work that way.  If a user does not have search
permission for a component of a path (i.e. the home directory), then he will
not be able to access anything below it.

The POSIX description for open(2) specifies that EACCES can occur when
``Search permission is denied on a component of the path prefix''.

http://www.opengroup.org/onlinepubs/007904975/functions/open.html
http://www.opengroup.org/onlinepubs/007904975/basedefs/sys/stat.h.html

-- 
David Phillips <david at acz.org>
http://david.acz.org/


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list