Security
Showing results for 
Search instead for 
Do you mean 

useradd creating home directory 755 instead of 700

Occasional Contributor

useradd creating home directory 755 instead of 700

HI All, Good Evening!!!

 

This doubt might be silly, but this is creating lot of security exposure.

 

When i create a user account using user add command, the home directory is getting created with 755 permission instead of 700 permission.

 

I've tried all means but no luck. i need the home directory to be created with 700 permission when i shoot useradd command. Can anyone help me out to resolve this issue.

 

Many Thanks in advance!!!

 

Regards,

 

Pradeep.

7 REPLIES
Honored Contributor Honored Contributor

Re: useradd creating home directory 755 instead of 700

I have not been able to find a way to do that yet.

 

It would make sense for your umask to control that, but I set umask to 077 and a homedir was still created with 755 permissions.

 

I will continue to search.

Acclaimed Contributor Acclaimed Contributor

Re: useradd creating home directory 755 instead of 700

Is there anything in /etc/default/useradd that controls it?

 

Otherwise you can just use chmod go-rx after the useradd.

Honored Contributor Honored Contributor

Re: useradd creating home directory 755 instead of 700

No, nothing in /etc/default/useradd regarding permissions.

Occasional Contributor

Re: useradd creating home directory 755 instead of 700

Thanks everyone who gave a try for my query....I tried using /etc/default/useradd , but no luck ..one thing I need to mention here, if I have unasked as 077, and if I create the account using Sam, then home directory gets created with 700 permission....
Acclaimed Contributor Acclaimed Contributor

Re: useradd creating home directory 755 instead of 700

>if I create the account using Sam, then home directory gets created with 700 permission.

 

I thought I checked recently but is there a useradd.sam like usermod.sam?

Honored Contributor Honored Contributor

Re: useradd creating home directory 755 instead of 700

Yes, there is a /usr/sam/lbin/useradd.sam, but it is just a link to /usr/sbin/useradd.  I looked at it but did not see anything that allows you to specify the homedirectory permissions.

 

 

Highlighted
Acclaimed Contributor Acclaimed Contributor

Re: useradd creating home directory 755 instead of 700

>it is just a link to /usr/sbin/useradd.

 

The program can just look at argv[0] and do something different.  Like usermod.sam.

 

>I looked at it but did not see anything that allows you to specify the homedirectory permissions.

 

But did you try it? ;-)  Of course kind of hard to find options if not present in the help.