I have set up two user groups, students and faculty on Ubuntu 12.04 and created a number of students and faculty accounts. The problem is a student can currently see & read all of the files of a fellow student :-/
I would like to prevent students from seeing/reading each others directories/files, but permit someone in the faculty group freely access to the student groups.
I'm not sure how to go about this, can anyone offer pointers on how to implement this policy? I know how to set/change groups, but not how to limit the policy to what they can do/see. (I've been a Linux user for a while, but administering more than my own account is new to me)
Also, would I have to change the
umask for all student accounts to make sure this policy doesn't get circumvented with new files/directories students create subsequently?
Would I as root execute
chmod go-rx /home/* on each student homedirectory to accomplish this goal, or am I going about this the wrong way?
UPDATE: Just to clarify, my goal is to have this as a default setup, I don't expect I can prevent informed/curious students from changing their own permissions - and I'm willing to live with that.