Handle ~/private as writable only by user and readable only by user and group.

1 files changed, 6 insertions, 0 deletions

diff --git a/user-init b/user-init
index 4888115..38ec924 100755
--- a/user-init
+++ b/user-init
@@ -221,6 +221,12 @@ for user in $USERS; do
 		fi
 	fi
 
+	# Private dir permissions
+	if [ -d "$HOME/private" ]; then
+		chown -R "$user": "$HOME/private"
+		chmod -R u+rX,g=r,g+X,o= "$HOME/private"
+	fi
+
 	# Fileshares: <home>/shares.<sharetype>/<rogroup>/<rwgroup>/<sharename>
 	#   <sharetype>: Either mac or win depending on which of netatalk and samba provides r/w access to the shares
 	#   <rwgroup>:   Group with write access to the share (usually the default group of the owner)