Fwd: Re: Support for file sharing over SMB/NFS

[Rik Hemsley]

#if Pixel
> Rik Hemsley <rik at kde.org> writes:
>
> [...]
>
> > > > 2 things; Rick thought that the dir $HOME should not be shared; only
> > > > subdirs.
> > >
> > > Why not? If I have an account on a machine, for work purposes only, and
> > > I share work with others?
> >
> > Simple, but effective, security helper. ~ contains passwords, .ssh, etc.
> > Of course, users can put important files anywhere, I just try to help
> > them out.
>
> the nfs share is exported with squash_all, implying only world readable
> files will be accessible...
>
> > Samba has authentication, so it's not quite as silly to share ~.
>
> well, it's exported with
>    public = yes
>    guest ok = yes
>    writable = no
>
> meaning everybody can access it, *but* the rights will be those of nobody,
> so yet again only world readable files will be accessible.

In that case (no password required), I think it's bad to allow sharing $HOME.

Rik