I hope you are aware of file permissions. If not, I have written a detailed and easy to understand guide to Linux file permission and I suggest you read that.

Most people probably never noticed it but the home directory in Ubuntu has the permission 755 i.e. rwxr-xr-x.

What it means is that if there are multiple users on the same Ubuntu system, they can enter home directory of other users and read the files stored in it. They cannot modify these files or execute them, however.

I think this is the common practice in many Linux distributions as this allows to easily share files between users on the same Linux system, specially in a server environment.

If this was the usual practice so far, why change it now?

As Alex Murray of Canonical points in the announcement, in the cloud and server environment, usually, there is one admin account and several worker accounts.

In a rare case, if the worker account is compromised, the attacker can easily access sensitive data from the home directories of other users and the admin accounts.

This is the reason why the home directories in Ubuntu 21.04 will have permission 750 instead of 755.

This means that other users on the same system cannot enter the home directories of other users or access and read their files. In cases, where a set of users were created as part of the same default group, they can still access home directories. By default, in Ubuntu, each user has its own default group with the same name as the username.

read more: https://news.itsfoss.com/private-home-directory-ubuntu-21-04/

I hope you are aware of file permissions. If not, I have written a detailed and easy to understand guide to Linux file permission and I suggest you read that.

Most people probably never noticed it but the home directory in Ubuntu has the permission 755 i.e. rwxr-xr-x.

What it means is that if there are multiple users on the same Ubuntu system, they can enter home directory of other users and read the files stored in it. They cannot modify these files or execute them, however.

I think this is the common practice in many Linux distributions as this allows to easily share files between users on the same Linux system, specially in a server environment.

If this was the usual practice so far, why change it now?

As Alex Murray of Canonical points in the announcement, in the cloud and server environment, usually, there is one admin account and several worker accounts.

In a rare case, if the worker account is compromised, the attacker can easily access sensitive data from the home directories of other users and the admin accounts.

This is the reason why the home directories in Ubuntu 21.04 will have permission 750 instead of 755.

This means that other users on the same system cannot enter the home directories of other users or access and read their files. In cases, where a set of users were created as part of the same default group, they can still access home directories. By default, in Ubuntu, each user has its own default group with the same name as the username.

read more: https://news.itsfoss.com/private-home-directory-ubuntu-21-04/

Private home directories? What does it mean?

I hope you are aware of file permissions. If not, I have written a detailed and easy to understand guide to Linux file permission and I suggest you read that.

Most people probably never noticed it but the home directory in Ubuntu has the permission 755 i.e. rwxr-xr-x.

What it means is that if there are multiple users on the same Ubuntu system, they can enter home directory of other users and read the files stored in it. They cannot modify these files or execute them, however.

I think this is the common practice in many Linux distributions as this allows to easily share files between users on the same Linux system, specially in a server environment.

If this was the usual practice so far, why change it now?

Making home directory private adds a security layer

As Alex Murray of Canonical points in the announcement, in the cloud and server environment, usually, there is one admin account and several worker accounts.

In a rare case, if the worker account is compromised, the attacker can easily access sensitive data from the home directories of other users and the admin accounts.

This is the reason why the home directories in Ubuntu 21.04 will have permission 750 instead of 755.

This means that other users on the same system cannot enter the home directories of other users or access and read their files. In cases, where a set of users were created as part of the same default group, they can still access home directories. By default, in Ubuntu, each user has its own default group with the same name as the username.

read more: https://news.itsfoss.com/private-home-directory-ubuntu-21-04/