How to hide content of /home directory?

krivenok · 09-07-2006, 10:13 AM

Hello All!

Is there a way to hide inaccessible content of /home
directory?

For example:
# root is root

server@root# ls /home
user1 user2 user3

# user1 should see only user1 subdirectory
server@user1$ ls /home
user1

# user2 should see only user2 subdirectory
server@user2$ ls /home
user2

# user3 should see only user3 subdirectory
server@user3$ ls /home
user3

Is it possible?
Thanks!

saini_mw · 09-07-2006, 10:21 AM

You can aplly "STICKY BIT" on your /home..

it will solve your problem...

Regards,

Harinder Singh

krivenok · 09-07-2006, 11:50 AM

Quote:

Originally Posted by saini_mw

You can aplly "STICKY BIT" on your /home..

it will solve your problem...

Regards,

Harinder Singh

How can it solve my problem?

win32sux · 09-09-2006, 07:55 PM

i'm not sure how the sticky bit relates to any of this...

maybe saini_mw misunderstood your question...

i think you'd need to patch your kernel with something like this:

http://www.gobolinux.org/?page=doc/articles/gobohide

http://wiki.linuxquestions.org/wiki/GoboHide

just my

...

JrLz · 09-14-2006, 09:53 PM

u can deny rwx for groups and others, so only the user / owner of that home dir can read it

stress_junkie · 09-14-2006, 10:57 PM

Set your /home directory as follows:

Code:

root> ls -ld /home
drwx--x--- 12 root users 1024 Sep 13 18:48 /home

Additionally I create a group for each user. So if I have an user account named melvin then I also create a group named melvin. Then the melvin account belongs to the melvin group.

Code:

root> groups melvin
melvin : users lp melvin

Then the /home/melvin directory is owned by melvin:melvin.

Code:

root> ls -ld /home/melvin
drwx------ 22 melvin melvin 2048 Sep 13 18:58 /home/melvin

As this relates to your initial post, the users will not be able to see the contents of the /home directory at all so this doesn't exactly match your stated requirement.

Code:

melvin> ls /home
/bin/ls: /home: Permission denied

But it keeps users from browsing the /home directory and it keeps the updatedb cron job, running under the nobody account, from indexing user files.