I create a system for multiple web masters for storing and serve their websites. They have their linux accounts and home directories. Their public_html folders are linked via
ln -s command to webserver html directory
/usr/share/nginx/html/ so they are visible in internet.
But users can watch home folders of other users. I would like to prevent them from watching folders that are not theirs.
How to get it?
Here are privileges info of the user.
abc@localhost:/home/gameboy$ sudo namei -mo /home/abc/public_html/info.php [sudo] password for abc: f: /home/abc/public_html/info.php drwxr-xr-x root root / drwxr-xr-x root root home drwxr-xr-x abc abc abc drwxr-xr-x abc abc public_html -rw-r--r-- abc abc info.php abc@localhost:/home/gameboy$ id abc uid=1002(abc) gid=1002(abc) grupy=1002(abc),27(sudo) abc@localhost:/home/gameboy$