Home / ubuntu / Questions / 511474
In Process
00fruX
Asked: 2014-08-15 13:15:38 +0800 CST

DIR_MODE has no effect on domain-joined user profiles in /home

  • 772

In /etc/adduser.conf I edited it to be DIR_MODE=0750 so all home directories are not world readable. However, this only seems to effect LOCAL users in the /home directory.

I have since joined my computer to a Windows domain and when I log in using a domain user it creates home folders in /home along with all the local users.

The DIR_MODE=0750 does not seem to apply to these folders that are created on the fly as domain users log in.

Any ideas how to get DIR_MODE in adduser.conf to apply to domain user's home folders?

permissions

1 Answers

  1. I changed both 027 values in /opt/pbis/bin/config to 077 and also have UMASK set to 077 in /etc/login.defs and DIR_MODE in /etc/adduser.conf set to 0750 and EVERYTHING WORKS the way I want. Only the user that creates their home folder (and root of course) has access to the home folder. Awesome!

    • 1