Endpoint Administration Guide for UNIX › Protecting Files and Programs › Restricting Access to Files and Directories › Restricting File Access › Restrict Users from Getting File Information

Restrict Users from Getting File Information

If you do not provide users with read access permissions to a file or directory, by default, they can still use the stat function to get information about the file. For example, a user without read access permissions to file /tmp/abc can perform the following operation:

ls -l /tmp/abc

To prevent users who do not have read access permissions from getting file information, set the STAT_intercept configuration setting to 1.

Note: For more information about the STAT_intercept configuration setting, see the Reference Guide.