user permissions - noob question

[wimbo]

hello,

i have three users on my computer (wimbo, thijs and seb) now i want that nobody can access some one elses directory in /home. so i changed permissions to this

[nielchiano]

you probabely need to remove the games from the users group, and add yourself.
I'm not a guru, but I don't think you can add groups to groups...

for the home dirs: setting permissions to 700 (that is rwx------) will allow the owner (=the user) all access, and deny everyone else.

[sundialsvc4]

The way you've set up things now, every user belongs to the "users" group and any member of that group can read and search (but not create files in) those directories. The files probably carry similar permissions. And, that's not good, because users are creating files that (thanks to their common group-membership) all of them can read.

A better approach is to create a separate group for each user, and each user belongs only to "his" group. That is to say, user george belongs to group george, and no one else belongs to that group.

If you want "shareable things," say among all-users or selected subsets of users, Access Control Lists (ACLs) provide very flexible controls.

[wimbo]

i see. but i didn't really set that up. it kind of happened while installing gentoo. ill' try to change it

thx,

wimbo

[pjp]

Moved from Installing Gentoo
_________________
Quis separabit? Quo animo?