Debian and other GNU/Linux systems often come with world readable logs/configurations/directories. For example, on a new install, these files are world readable:
/etc/passwd
/var/log/lastlog
- list of running cron jobs
Although being able to read those files isn't directly a threat, in a system where all users cannot be trusted, it's wise to minimize system visibility.
Is there a linux flavor / standard tool for avoiding those kinds of situation where new users can harvest that many details about the server they're using? Ideally, they should be limited to their own directories.
I've already set up chroot jails in the past, but I'm looking for an alternative solution or tricks some of you may have.
Thanks!