On Tue, Jan 10, 2006 at 11:53:38AM +1030, Tim wrote: > On Mon, 2006-01-09 at 14:39 -0600, Jeff Vian wrote: > > Mode 004 is interpreted as "readable by everyone except owner or > > group" (they are explicitly denied). > > > > To make it truly _world_ readable it needs to be mode 444. > > Are you sure? I'd have thought that 404 would be sufficient, if the > reasons offered were true. A quick test proved it worked for me. $ id uid=500(davem) gid=500(davem) groups=500(davem) context=user_u:system_r:unconfined_t $ ls -l /tmp/foo -r-----r-- 1 root davem 2 Jan 10 21:32 /tmp/foo $ cat /tmp/foo cat: /tmp/foo: Permission denied $ -- "Foul and greedy Dwarf - you have eaten the last candle." -- "Hordes of the Things", BBC Radio.