[Touch-packages] [Bug 48734] Re: Home permissions too open

2021-01-17 Thread Giovanni Pelosi
The issue with rootless podman userns mapping is described here (postgres db confined in host user home): https://www.redhat.com/sysadmin/rootless-podman-makes-sense -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to adduser in

[Touch-packages] [Bug 48734] Re: Home permissions too open

2021-01-16 Thread Giovanni Pelosi
Probably, behind the original decision there were also issues of home access, required by some unprivileged services, like apache (userdir). Today, letting all users accessing any ~/Doc,~/Pic,~/Video look like a huge security hole (MS Windows deny this). But anyway, today 'user' access should