Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have just signed up for a Linode CentOS 6.2 VPS. Is it safe to remove other/world permissions from all files and folders, I've noticed that almost system wide the world/other user has r-x permissions by default. Are there any dangers in removing these in one go? Anything to look out for?

The reason for this is for setting up SSH access for untrusted contributors. I would like to hide all but their home folder without creating a chroot jail.

Some Example Permissions:

[root@li610-232 bin]# cd /
[root@li610-232 /]# ls -l
total 84
dr-xr-xr-x   2 root root  4096 Apr 11  2012 bin
dr-xr-xr-x   2 root root  4096 Apr 11  2012 boot
drwxr-xr-x  16 root root 14000 Sep 18 07:30 dev
drwxr-xr-x  67 root root  4096 Sep 18 07:30 etc
drwxr-xr-x   2 root root  4096 Sep 23  2011 home
dr-xr-xr-x   8 root root  4096 Apr 11  2012 lib
dr-xr-xr-x   8 root root  8192 Apr 11  2012 lib64
drwx------   2 root root 16384 Apr 10  2012 lost+found
drwxr-xr-x   2 root root  4096 Sep 23  2011 media
drwxr-xr-x   2 root root  4096 Sep 23  2011 mnt
drwxr-xr-x   2 root root  4096 Sep 23  2011 opt
dr-xr-xr-x 125 root root     0 Sep 18 07:30 proc
dr-xr-x---   2 root root  4096 Apr 11  2012 root
dr-xr-xr-x   2 root root  4096 Apr 11  2012 sbin
drwxr-xr-x   2 root root  4096 Apr 10  2012 selinux
drwxr-xr-x   2 root root  4096 Sep 23  2011 srv
dr-xr-xr-x  13 root root     0 Sep 18 07:30 sys
drwxrwxrwt   3 root root  4096 Sep 18 07:30 tmp
drwxr-xr-x  13 root root  4096 Apr 10  2012 usr
drwxr-xr-x  18 root root  4096 Apr 11  2012 var
[root@li610-232 /]# cd var
[root@li610-232 var]# ls -l
total 64
drwxr-xr-x  2 root root 4096 Apr 10  2012 account
drwxr-xr-x  8 root root 4096 Apr 10  2012 cache
drwxr-xr-x  3 root root 4096 Apr 10  2012 db
drwxr-xr-x  3 root root 4096 Apr 10  2012 empty
drwxr-xr-x  2 root root 4096 Sep 23  2011 games
drwxr-xr-x 18 root root 4096 Apr 11  2012 lib
drwxr-xr-x  2 root root 4096 Sep 23  2011 local
drwxrwxr-x  3 root lock 4096 Apr 11  2012 lock
drwxr-xr-x  7 root root 4096 Sep 18 07:30 log
lrwxrwxrwx  1 root root   10 Apr 12  2012 mail -> spool/mail
drwxr-xr-x  2 root root 4096 Sep 23  2011 nis
drwxr-xr-x  2 root root 4096 Sep 23  2011 opt
drwxr-xr-x  2 root root 4096 Sep 23  2011 preserve
drwxr-xr-x 12 root root 4096 Sep 18 07:30 run
drwxr-xr-x 11 root root 4096 Apr 10  2012 spool
drwxrwxrwt  2 root root 4096 Apr 11  2012 tmp
drwxr-xr-x  2 root root 4096 Sep 23  2011 yp
share|improve this question

migrated from stackoverflow.com Sep 18 '13 at 13:04

This question came from our site for professional and enthusiast programmers.

add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.