Configuring access rights for a guest
 

Hi!

I'm wondering how my configuration could be done for a guest account. I'm using SuSE Linux 10.0 OSS and the configuration tool YaST2. The problem is that my newly created guest account has the right to view and read others peoples' folders. I want to set the rights to that effect that the guest can only view his own files and nothing else! Group assignment like "nogroup" or "nobody" didn't work.

you could remove the "others" permissions from people's home folders... this way nobody can look at someone else's home folder... if you do it this way then you don't need to create any special groups or anything... kinda like:EDIT: the above was actually a mistake on my part, as it should be a 700 and NOT a 750... unless of course each user on the system would have his own group...

What I'm looking for is that my guest account doesn't belong to any group at all so he couldn't do anything except his own stuff, or identical user and group. I mean, it's far more complicated to configure each thing you want to protect instead of making clear one time for a user what he's able to do and what he's not. It would be too risky for me to change access rights of many folders because it can be difficult undoing that.

Even if your user didn't belong to any groups, the 'other' part of the permissions will let them see files in home directories unless it is set to 0 as in win32sux's example. Another way to get the same result if you don't want to modify user/group permissions, just others, is:
The main risk in doing this is if there is a home directory that everyone should access, it will now be unavailable.

please see the correction i made to my post above...

the proper way to achive privacy between users is with:this way you can rest assured that only the owner of the home folder will be able to read/write/enter it...

no way, it's very easy to undo this... just set the perms back to the usual 755, like:and then everyone can snoop around everyone else's private stuff again... :)

BTW, keep in mind that you could also specify which user is the one you don't want to have his privacy violated, like:now nobody will be able to snoop on user schreiberling, while the permissions for the other users' home folders remain untouched...