[SOLVED] securing my account

tavva divya · 03-15-2010, 12:42 PM

I had 2 accounts on a single system. Other users are able to see my data. how to stop other users to access my personal data.

raju.mopidevi · 03-15-2010, 12:44 PM

may be your umask is set as 022. This allows you read ,execute access to all groups, all users.

raju.mopidevi · 03-15-2010, 12:46 PM

try this
chmod 700 /home/<your account>
This restricts others to read or execute your a/c.

raju.mopidevi · 03-15-2010, 01:03 PM

If you give security by umask value, you are also restricted to see other accounts.
But using above command only your home folder will be restricted for other users. you can see others accounts.

tavva divya · 03-15-2010, 01:04 PM

thank you

catkin · 03-15-2010, 02:15 PM

Quote:

Originally Posted by raju.mopidevi

If you give security by umask value, you are also restricted to see other accounts.

umask is only effective when creating files; it does not affect what you are able to read/write/execute/list. From the umask man page:

Code:

DESCRIPTION
       umask()  sets  the  calling process's file mode creation mask (umask) to mask & 0777 (i.e., only the file permission bits of mask are
       used), and returns the previous value of the mask.

       The umask is used by open(2), mkdir(2), and other system calls that create files to modify the permissions placed  on  newly  created
       files or directories.

raju.mopidevi · 03-15-2010, 02:34 PM

Hi catkin, I am talking about accessing files, if I change umask in such a way that only that particular user can access. then we can't access other user files.

slimm609 · 03-15-2010, 04:41 PM

Quote:

Originally Posted by raju.mopidevi

Hi catkin, I am talking about accessing files, if I change umask in such a way that only that particular user can access. then we can't access other user files.

Changing the umask to anything will only affect NEWLY created files. So that would help for the files that he creates in the future but not for the directory or files that are already there.

raju.mopidevi · 03-15-2010, 04:53 PM

I also talking about the yet to be created files only.

Clearly what i want to say is .....
The present umask value allows to read, execute the files.
if you change the umask value that effects to access this user. without effecting other user's permissions and changing our own home directory permissions is a way to secure our account