How to restrict users in linux to their home directory

So lets say you have a server with a bunch of users and they all have sites and data and you don’t want them to be able to see each others data. A lot of distributions aren’t setup to stop users from wandering and reading files within other users directories.

So lets say you have a server with a bunch of users and they all have sites and data and you don’t want them to be able to see each others data. A lot of distributions aren’t setup to stop users from wandering and reading files within other users directories.

What you will need to do is change the permissions on the /home and each users directory using chmod. So first we need to change the permission on “/home”


[root@taco:/]# chmod 0751 /home
[root@taco:/]# stat home
File: `home'
Size: 4096 Blocks: 8 IO Block: 4096 directory
Device: 900h/2304d Inode: 2 Links: 32
Access: (0751/drwxr-x--x) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2007-12-03 13:58:07.000000000 -0800
Modify: 2007-11-21 12:10:17.000000000 -0800
Change: 2007-12-03 13:57:28.000000000 -0800

As you can see the folder is now set to 0751, depending you may want to change this but by default this should be fine.

Now you need to change the permission on each users directory using chmod yet again


[root@taco:/]# chmod 0751 jordan
[root@taco:/home]# stat jordan
File: `jordan'
Size: 4096 Blocks: 8 IO Block: 4096 directory
Device: 900h/2304d Inode: 19709953 Links: 15
Access: (0751/drwxr-x--x) Uid: ( 1000/ jordan) Gid: ( 1000/ jordan)
Access: 2007-12-03 12:14:23.000000000 -0800
Modify: 2007-11-14 11:06:38.000000000 -0800
Change: 2007-12-03 13:57:42.000000000 -0800

Now your users shouldn’t be able to see other users on your system!


Did you like this article?


0 Shares:
You May Also Like

First Google Android Phone Approved by the FCC

The first Google Android Phone has been approved by the FCC. The HTC dream will be the first Android phone.
Today, the news broke that the HTC Dream, the first handset to run Android (aka "the Google Phone") has been approved by the FCC. In the documents provided, it appears that we have now a release date for this highly anticipated phone: November 10th, 2008.
Another challenger appears! Read the full article at readwriteweb.com
Read More

Windows Live SkyDrive gets 1GB of storage

SkyDrive is an online storage service from Microsoft Windows Live. If you wish to sign up and use the SkyDrive service, you would need a Windows Live account as well as be within the United States to be able to use the service.
Read More

Domain Name Portfolio 0.6.2 (Default branch)

This is a very interesting application, if you have lots of domain names that you're looking to sell. This application can do everything for you.
Domain Name Portfolio 0.6.2 (Default branch) - Screenshot Domain Name Portfolio is a Web based application to help domain owners better organize their portfolio. It allows you to list your domains with their expiry date, registrar, price, status, and category. It also allows visitors to your portfolio to contact you about a given domain. License: GNU General Public License (GPL) Changes:
A bug in the emailer class which caused a parse error was fixed.

[FreshMeat]
Read More

Boeing’s unmanned A160T Hummingbird helicopter takes flight

Not the first Unmanned aerial vehicle (UAV) made. But the Boeing A160HT Humming Bird should be one of the best once further tests and simulation in combat missions is completed.
Boeing's unmanned A160T Hummingbird helicopter takes flight -

Filed under:


It's been a few ticks since we've seen Boeing send an atypical aircraft into the friendly skies, but the firm's latest helicopter has successfully completed a 12-minute test flight without so much as a pilot on board. The A160T Hummingbird unmanned rotorcraft is a turbine-powered "warfighter" that aims to provide "intelligence, surveillance, and reconnaissance coverage" in locales that could make even the most calloused veteran queasy. During its time in the air, it reportedly met every objective set for it, and while we've no idea how soon this thing will be lifting itself up, it'll eventually reach speeds of up to 140 knots and stay airborne for up to 20 hours before returning to base for a pat on the wing.

[Via The Raw Feed, image courtesy of SkyControl]

 

Read | Permalink | Email this | Comments


Office Depot Featured Gadget: Xbox 360 Platinum System Packs the power to bring games to life!

[EnGadget]
Read More

La Fontenna Extends Range Of FON Wireless Goodness

La Fontenna Extends Range Of FON Wireless Goodness -

fontenna.jpegThis is simple really: FON lets you share your wireless Internet connection with FON community members (called Foneros) and in return you get to hop on any other member’s wireless connection free of charge, anywhere in the world. The La Fonera is the specially designed $39.95 Wi-Fi access point that lets you securely share your wireless connection. The $19.95 Lafontenna is a directional antenna that extends your FON Wi-Fi coverage area up to five times farther than the Fonera’s standard range.

Any questions?

[CrunchGear]
Read More