Guys, I found a flaw that allows a user to access another user's area without using sudo. When we create a new user, the directory at /home for this new user has the permission 755, everyone can access your file whith this permission. It's easily corrective by a chmod 700 /home/
The second flaw is very serious, whem I configure a connection using the OPENVPN on network configuration tab, your VPN will be accessible for another user, I tryed solve it, but I'm not able to do it.
中文 
deepin 
deepin 
Guys, I found a flaw that allows a user to access another user's area without using sudo. When we create a new user, the directory at /home for this new user has the permission 755, everyone can access your file whith this permission. It's easily corrective by a chmod 700 /home/
The second flaw is very serious, whem I configure a connection using the OPENVPN on network configuration tab, your VPN will be accessible for another user, I tryed solve it, but I'm not able to do it.
Has someone faced it too? I'm use Deepin 15.11.