On Fri, Oct 29, 2010 at 10:12 PM, Brynet <brynet@gmail.com> wrote:
quoted text
>
> I believe the real problem here is that you're allowing users on your
> systems that are incapable of properly setting the group/world
> permissions of their home directories.

My employer lets a variety of people on their systems - they just want
work to get done and don't know or care about this kind of thing.
Don't you have this problem where you work?

Seriously, putting everyone in the same 'users' group is like running
all your daemons as 'nobody'.  I can quote a stack of UNIX books that
recommend against both (a couple examples are Secure Architectures
with OpenBSD, the AbsoluteBSD books, and the ones I linked to above).
They all talk about using 'adduser' and how per-user groups is the
best option - which is why it is the default.  Changing the default
would invalidate a lot of documentation.

quoted text
> It's also a possibility that you are derelict in your duties as a
> systems administrator.
>
> No cookies for you.

This is tech@, not misc@.

Daniel