Correct permission for home directory

[Paul Smith]

On Sat, Jul 13, 2013 at 3:47 PM, lee <lee at yun.yagibdah.de> wrote:
>> chmod 755 /home
>>
>> But what about
>>
>> /home/psmith
>
> It depends on what you want.  There is some tradition that home
> directories are readable for everyone and writable for their owners
> only.  It may be a good idea to make them readable for their owners only
> --- or a bad idea like when you're exporting directories in homes
> through apache (which I think is a very bad idea).
>
> In case you have users in groups that need to access someones home
> directory, you may want to allow group access.  When you have convoluted
> requirements, you may want to use ACLs to accomplish what you need ...

Thanks, Lee. I have done the following:

chmod 755 /home
chown psmith /home/psmith
chmod -R u=rwx,g=,o= /home/psmith

I hope those have left my system secure!

Paul