Your Distro is Insecure: Ubuntu

Tony Yarusso tonyyarusso at
Tue Apr 14 20:04:25 UTC 2009

On Tue, Apr 14, 2009 at 2:27 PM, Kees Cook <kees at> wrote:
> This discussion has already happened.  The solution is education, or if
> it's really that important, a debconf question for configuring
> /etc/adduser.conf.
> --
> Kees Cook
> Ubuntu Security Team

It seems to me at least that the rationale for the permissive home
directories is somewhat more oriented at the home user, so I would be
inclined to say leave everything as-is for the desktop install, but I
think it may be appropriate for the server installer to have a debconf
question for this.  That would certainly be a wholly acceptable
solution to me personally at least.

Tony Yarusso

More information about the ubuntu-server mailing list