hello,
Is it normal that on a fresh install of Ubuntu 24.04, a non-admin user can use the file manager to list all the files present on the server, and at least download them?
v-list-sys-info
HOSTNAME OS VER ARCH HESTIA RELEASE UPTIME LA
beer.domain.com Ubuntu 24.04 x86_64 1.9.2 release 9 0.04 / 0.13 / 0.09
bash hst-install.sh --hostname ‘beer.domain.com’ --username ‘admin’ --email ‘[email protected]’ --password ‘xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx’ --webterminal yes --force
I connected directly to the user without going through the administrator to rule out any inherited behavior when you are logged in as an admin and select a user.
This behavior seems to stop when we change the ‘SSH Access’ parameter from ‘nologin’ to ‘bash’. 
Does this look like a security issue?
