Can The Permissions Of a Service-User's Home Folder (Such As /var/lib/nfs/) Be Less Permissive Than 755 (rwxr-xr-x)? (Doc ID 2883349.1)

Last updated on NOVEMBER 15, 2022

Applies to:

Goal

Clarify if the below security request regarding a service-user's home folder is supported and if it can be implemented:

The permissions for home directory of user nfsnobody was found to be 755 which is more permissive than 750

This Document applies directly to the the "/var/lib/nfs/" folder (home folder of the "nfsnobody" service-user) but the same can be stated regarding other folders such as but not limited to:

• the "/var/lib/chrony/" path related to the "chrony" account;
• the "/var/lib/geoclue/" path realted to the "geoclue" account;
• the "/var/lib/colord/" path related to the "colord" account;
• the "/usr/share/sane/" path related to the "saned" account;
• the "/etc/unbound/" path related to the "unbound" account.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.