RedditPP Mascot

RedditPP

r/sysadmin • … • u/jmbpiano

Should Everyone have permission to Read Permissions?

Doing some auditing on the folder security of our file server, I noticed that one of our primary folders has permissions set to allow "Read Permissions" for Everyone.

Everyone has no other access; no traverse/execute, no read, nothing.

I'm not sure why this was originally done and I'm curious if there are any negative security implications here. The only possible attack scenario I can think of would be random guessing to enumerate the subfiles/folders, but perhaps I'm missing something?

Should I be concerned?

— 0