Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have accidently changed

/home

permissions to

 777

and now i don't know what permission to set.

share|improve this question
add comment

5 Answers

up vote 4 down vote accepted

I think the best permission would be

 711 if you dont want to add groups as well or

 751  so that public can't read your home directory

with 755 public can read which other users are on you home directory

share|improve this answer
add comment

The default would usually be 0755.

I guess 0751 would also work, if you for some reason don't want the content to be publicly browsable.

(of course, owned by root:root)

share|improve this answer
    
But i have websites for public view in user accounts –  OooooO Dec 8 '09 at 23:47
    
Yes, and you can have different ownership settings on folders further down in the tree. The only thing which is import at this level is that "others" (value to the far right) at least has the X-bit (1), allowing anyone to traverse further down to the publicly browsable folders, which then also would be to be readable. –  andol Dec 9 '09 at 0:21
add comment

I would say 0755 is your best bet.

share|improve this answer
add comment

the /home directory should be 755 IMO. I use 755 or 750 on each user's /home/username directory for more privacy.

share|improve this answer
add comment

755 for /home

770 for individual user home folders or folder where you want to give write privileges to your group. In most cases, I set the last digits to 0 because if they are not in my group, I usualy dont want them to have any access at all.

I use 770. this way, people not in my group have no access whatsoever to the subfolders. With 775, people can still see your directory structure and names.

share|improve this answer
    
I would not recommend group write permission for a personal home directory. Maybe a shared service "drop box" for a pseudo-user's home dir, but there are better ways to implement that. –  kmarsh Jan 15 at 22:33
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.