Re: Permissions to allow public_html and nothing else

["Anthony E. Greene" <agreene pobox com>]

Peter Kiem wrote:
> 
> I am setting up web access for my users and want to make sure I have the
> file permissions correct.
> 
> Let's say for user imauser I set up the following:
> 
> home directory: /home/imauser
> permissions: drwx-----x
> 
> web directory: /home/imauser/public_html
> permissions: drwxr-xr-x
> 
> web files: e.g. /home/imauser/public_html/index.html
> permissions: -rwxr--r--
> 
> Is this secure to allow access to the web directory and nothing else of the
> user's home directory?

Other users can still see the directory information for files in the $HOME
directory if they already know the filename. I created a directory for my
users that has permissions drwx------ so that only the owner can see the
files.

-- 
 Anthony E. Greene agreene pobox com
 Homepage & PGP Key http://www.pobox.com/~agreene/
 If it's too good to be true, it's probably Linux.