I usually set /home to 751 to allow world-traversability without world-readability, but snap applications stop working with below error:
hello-world
cannot create user data directory: /home/myuser/snap/hello-world/29: Permission denied
When I set /home back to 755, it works fine.
Other relevant permissions:
/ root:root 755
/home root:root 751
/home/myuser myuser:myuser 750
It’s usually a good practise to set /home to 751 and applications usually have no issue with /home being 751, because they never need to list the contents of /home, they know the absolute path to what they want to access, so everything works fine with traversability only, e.g. chmod o+x alone.
I’m only having this issue with snap. Perhaps some part of the code does an unnecessary listing of the /home directory, causing that error.
Why does snap requires world-readability on /home ? Why is 751 not enough?