[debian-edu-commits] [Debian Wiki] Trivial Update of "DebianEdu/Documentation/Squeeze/Architecture" by AndrewSayers

[Debian Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Debian Wiki" for change notification.

The "DebianEdu/Documentation/Squeeze/Architecture" page has been changed by AndrewSayers:
https://wiki.debian.org/DebianEdu/Documentation/Squeeze/Architecture?action=diff&rev1=33&rev2=34

Comment:
Add footer guard (----)

  
  The initial access settings for newly created files are a matter of policy. The Debian default umask is 022 (which would not allow group-access as described above), but Debian Edu uses a default of 002 - meaning that files are created with read access for everybody, which can later be removed by explicit user action. This can alternatively be changed (by editing `/etc/pam.d/common-session`) to a umask of 007 - meaning read access is initially blocked, necessitating user action to make them accessible.  The first approach encourages knowledge sharing, and makes the system more transparent, whereas the second method decreases the risk of unwanted spreading of sensitive information. The problem with the first solution is that it is not apparent to the users that the material they create will be accessible to all other users. They can only detect this by inspecting other users' directories and seeing that their files are readable. The problem with the second solution is that few people are likely to make their files accessible, even if they do not contain sensitive information and the content would be helpful to inquisitive users who want to learn how others have solved particular problems (typically configuration issues).
  
+ ----
  CategoryPermalink