Setting strict access modes to home dirs 81/35481/1 accepted/tizen_3.0.2014.q4_common tizen_3.0.2014.q4_common tizen_3.0.2015.q1_common accepted/tizen/3.0.2014.q4/common/20150217.104618 accepted/tizen/common/20150217.104241 accepted/tizen/mobile/20150225.053443 accepted/tizen/tv/20150225.070426 accepted/tizen/wearable/20150225.053911 submit/tizen_3.0.2014.q4_common/20150217.104302 submit/tizen_common/20150217.104201 submit/tizen_mobile/20150223.000000 submit/tizen_mobile/20150225.015638 submit/tizen_tv/20150225.015239 submit/tizen_wearable/20150225.015550
authorJosé Bollo <jose.bollo@open.eurogiciel.org>
Mon, 16 Feb 2015 10:40:39 +0000 (11:40 +0100)
committerJosé Bollo <jose.bollo@open.eurogiciel.org>
Mon, 16 Feb 2015 10:40:39 +0000 (11:40 +0100)
The home directory of any user MUST not be readable, writable
or useable by any other user and by any member of the group 'users'.

This commit make it possible by setting correct access modes to
the skeleton directory of any user directory: /etc/skel.

Change-Id: I2fadab8b0728a08e17b8e902949ad074190aaacd
Signed-off-by: José Bollo <jose.bollo@open.eurogiciel.org>
packaging/tizen-platform-config.spec

index d03118b..6aecd9a 100644 (file)
@@ -91,6 +91,7 @@ LANG= sort | while read skelname context transmute; do
        chsmack -a "$context" "$skelname"
        [ "$transmute" = true ] && chsmack -t "$skelname"
 done
+chmod 700 $HOME
 HOME="$saveHOME"
 ##############################################
 # END - creation of the /etc/skel/content