Welcome to the MacNN Forums.

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

You are here: MacNN Forums > Software - Troubleshooting and Discussion > Mac OS X > Glaring Privacy Hole in Home Folder (Everyone can see user created folders)

Glaring Privacy Hole in Home Folder (Everyone can see user created folders)
Thread Tools
Fresh-Faced Recruit
Join Date: Feb 2012
Status: Offline
Reply With Quote
Feb 15, 2012, 07:33 PM
 
In OS X, any folders that you create in the Home Folder can be viewed by other users of the Computer!
Isn't this a glaring privacy hole? It does not warn while creating, its not well publicised and I think its entirely reasonable for a user to expect that their entire Home Folder is sandboxed from other users and not just the system default folders.

Example: If you goto you Home folder and create a new folder "Projects" or "Assignments", its contents can be viewed and modified by other users!

Whats the rationale for this?
Thanks
     
P
Moderator
Join Date: Apr 2000
Location: Gothenburg, Sweden
Status: Offline
Reply With Quote
Feb 16, 2012, 02:49 AM
 
Not exactly. By default, files in your folder can be viewed, but not modified. Other users have read only privileges. The rationale is that this is the way it always was on UNIX, before such newfangled things as Macs (much less Windows) came on to the scene. For comparison, I think the Home versions of Windows have the same default setup - although I'll admit to never using the Home version of anything newer than XP.

As you've probably already noticed, it's easy enough to change.
The low-end Mac Pro is the most overpriced Mac since the IIvx
     
andy06  (op)
Fresh-Faced Recruit
Join Date: Feb 2012
Status: Offline
Reply With Quote
Feb 16, 2012, 06:38 AM
 
You're right, they viewable but not modifiable.
But that's not much better from user point of view hehe. Windows handles it the expected way (I checked just now) i.e The entire home folder is off limits w/o an admin password.

I did indeed change the permissions but I think that workaround is less than optimal. When creating tonnes of temporary folders (eg: by project name or by assignment name), I'm sure one of these times I'll forget.

Is there like a terminal command that'll change the default setting? I vaguely remember seeing something couple of years but ignored it coz I wasn't an OS X user and now can't seem to Google it

Thanks
     
P
Moderator
Join Date: Apr 2000
Location: Gothenburg, Sweden
Status: Offline
Reply With Quote
Feb 16, 2012, 08:18 AM
 
Easiest is just to change the permissions on your home folder itself to remove read privileges. Privileges are hierarchical, so you need read permissions (or technically, execute permissions, but from the Finder interface they are the same thing) on all folders above to be able to read something. Just change your home folder, and that's it.

To answer your question: Yes, you can change the default for new folders created by changing the umask. Follow the instructions from Apple to set the umask to 077. As you can see from the procedure, this is an advance procedure - I would advice that you simply change the permissions of your home folder.
The low-end Mac Pro is the most overpriced Mac since the IIvx
     
andy06  (op)
Fresh-Faced Recruit
Join Date: Feb 2012
Status: Offline
Reply With Quote
Feb 16, 2012, 08:31 AM
 
But that would break Shared Folders and Public (and Dropbox) I think. It seems to be a slightly broken design
Am just gonna avoid creating my own directories from now on. Will create a dedicated "Others" directory, fix its permissions and then create everything as a sub directory under "Others"
     
Mac Elite
Join Date: Feb 2000
Location: Nashua NH, USA
Status: Offline
Reply With Quote
Feb 16, 2012, 09:07 AM
 
Just put you folders one level deeper. Or don't name the folder anything obvious.
     
   
Thread Tools
Forum Links
Forum Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Top
Privacy Policy
All times are GMT -5. The time now is 04:00 PM.
All contents of these forums © 1995-2011 MacNN. All rights reserved.
Branding + Design: www.gesamtbild.com
vBulletin v.3.8.7 © 2000-2011, Jelsoft Enterprises Ltd., Content Relevant URLs by vBSEO 3.3.2