Prohibit users from seeing each other's files

[fottsia]

If I use two instances of LDM, e.g. for a multiseat system,
then e.g. user1 has his files in /home/user1 and user2 in /home/user2.

The problem is that user1 can access /home/user2.

[Jim McQuillan (jam-mcquil)]

This is not an LTSP bug. This is part of managing a Linux/Unix system in a multi user environment.

You can do a lot with permissions on home directories to control who has access.

Jim.

> On Jul 7, 2019, at 1:43 AM, fottsia <email address hidden> wrote:
>
> Public bug reported:
>
> If I use two instances of LDM, e.g. for a multiseat system,
> then e.g. user1 has his files in /home/user1 and user2 in /home/user2.
>
> The problem is that user1 can access /home/user2.
>
> ** Affects: ltsp
> Importance: Undecided
> Status: New
>
> --
> You received this bug notification because you are a member of Comitters
> to the LTSP upstream branch on launchpad, which is subscribed to LTSP.
> https://bugs.launchpad.net/bugs/1835643
>
> Title:
> Prohibit users from seeing each other's files
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ltsp/+bug/1835643/+subscriptions

[Alkis Georgopoulos (alkisg)]

Thanks, fix committed in https://git.launchpad.net/ltsp/commit/?id=ca6d80f501362f8163c2255efe00d54067348713.

This is caused because we were using "allow_other" without "default_permissions" in sshfs calls, see the fuse(8) man page.
Hence each user was able to access other user's files, even if /home/username had mode=700.
Multiseat over LTSP isn't widely used though, so it wasn't that important.