Comment 4 for bug 269921

Revision history for this message
der_vegi (m-may) wrote : Re: [Intrepid alpha] guest account can access /home/user

Same problem here with Intrepid Beta. If I browse a user directory as guest with Nautilus, I can see the files and their previews which already reveal some of their content, but cannot open them with gedit "permission denied". In the console they can be opened.

I also think that for example /boot should be denied to the guest user, as he might be able to read out a plaintext password that is stored in /boot/grub/menu.lst to prevent access to root privileges during boot.