I have set up two user groups, students and faculty on Ubuntu 12.04 and created a number of students and faculty accounts. The problem is a student can currently see & read all of the files of a fellow student :-/
I would like to prevent students from seeing/reading each others directories/files, but permit someone in the faculty group freely access to the student groups.
I'm not sure how to go about this, can anyone offer pointers on how to implement this policy? I know how to set/change groups, but not how to limit the policy to what they can do/see. (I've been a Linux user for a while, but administering more than my own account
is new to me)
Also, would I have to change the umask for all student accounts to make sure this policy doesn't get circumvented with new files/directories students create subsequently?
Would I as root execute chmod go-rx /home/* on each student home directory to accomplish this goal, or am I going about this the wrong way?
Thanks!