Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It was brought to my attention recently the user's home folders on our server have group read permissions.

The subfolders within them - Documents, Movies, Pictures, etc. do not have group permissions, but any files and directories created at the top level in the home folder itself have group read permissions.

(If these were local accounts on a client machine, then each user would be in their own group, thus naturally restricting group access.)

What's the best way to fix current home folders now and to remove group read permissions for all future accounts that are created? I noticed each home folder currently has an ACL "group:everybody deny delete", could I add another ACL as a quick fix?

In WM, all users are by default put in the 'staff' group.


PS. I realise of course the exception to this is Public and Sites should be a+rx
PPS. I'm running OS X Server 10.5 Leopard (10.5.8)

share|improve this question

To remove the permission for existing users:

cd /Users for user in *; do chmod g-r ${user}; done

To remove it from the template user folder, which will affect any newly-created users:

chmod g-r /System/Library/User\ Template/*

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.