The sysadmins at work want us to remove all world permissions from all files and directories within a specific filesystem. Normally, I would agree with such security practices. However, I don't understand the point in doing so because the parent directory only allows users within a specific group to access the filesystem.
For example, the parent directory has permissions like:
drwxr-x--- 5 root group 4096 Apr 7 15:27 /example
And the subdirectories have permissions like:
drwxrwxrwx 2 user group 4096 Apr 10 00:34 /example/dir1 drwxrwxrwx 2 user group 4096 Apr 8 12:52 /example/dir2 drwxrwx--- 2 user group 4096 Apr 12 08:13 /example/dir3
/example/dir2 are what currently exists.
/example/dir3 is what our sysadmins want the permissions to be.
Is there any benefit to removing world permissions from
/example/dir2 when only users in
group can access this filesystem? What are the best practices?