My first question: File Directory rights Sol 10

[stefau]

Experts.

I'm new to this forum and also new to solaris... not at all, but found a problem, which makes me believe to be new to solaris.

I'm running Solaris 10 on a Netra.
I've installed it from CD, installed lots of tools from sunfreeware.com (Mysql, Apache, PHP....) and it works all fine.
Now, I have to allow a system to send me files using rcp, which basically seems to require a user acccount having a password and a directory, where to put the files.

I've created that user using useradd incl. directory and gave it a password.
I used a new UID and a new create group.

Surprisingly (to me), after logging in (bash), this user is able to read almost every file in my system (cat, ls...)

I find any documentation about giving access to someone, but as almost every directory has r acess for 'other' it looks odd to me.

What did I do wrong during installation??? What part did I miss?

Thank you.

Stefan

 

[spamly]

This is typical for any unix system. If a file has "other" read access, anyone can read it.

I'd suggest using a restricted shell so the user is change-rooted to his/her home directory. Assuming the home directory is actually separate (not /) this will effectively lock down the user.