Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: ssh quirks...

Re: ssh quirks...

From: LaMont Jones <lamont_at_SECURITY.HP.COM>
Date: Mon, 27 Dec 1999 15:24:18 -0700

> This is standard unix behaviour. if a user's home directory path isn't
> readable by that user, they can't access it. typically the /home dir should
> be world readable as should the / dir. home directories can be any
> permissions a user wants and should be owned by the user themselves.

Minor nit:
Read access (to a directory) is needed to list it. Execute access is
needed to access things in it. You can log in with a home directory
that is mode 100, but you won't be able to get anything out of ls...

If, for whatever insane reason, you don't want your users knowing anyone
else's home directory, you can remove world read perms from /etc/passwd,
and make /home mode 511. Not that anyone would recommend that...

lamont
Received on Dec 27 1999

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos