[OpenAFS] home on afs woes

Ken Hornstein kenh@cmf.nrl.navy.mil
Wed, 04 Jan 2006 16:30:37 -0500


>With AFS we have to decide whether to allow the world to read the entire top 
>level of a home directory, or to always require the username and password for 
>each login. At the moment I've chosen the latter, since the former requires 
>vigilance on the part of the user that I'm not comfortable with counting on.

FWIW, we choose the exact opposite option (world readable home directory)
for the exact same reason (lack of confidence in the vigilance of users).

--Ken