security-misc/usr/share/pam-configs/permission-lockdown-security-misc

Name: prevent others from reading one's home folder (by package security-misc)
Default: yes
Priority: 50
Session-Type: Additional
Session:
	optional	pam_exec.so	debug seteuid /usr/lib/security-misc/permission-lockdown
run permission lockdown during pam https://forums.whonix.org/t/change-default-umask/7416 2019-08-14 04:34:03 -04:00			`Name: prevent others from reading one's home folder (by package security-misc)`
			`Default: yes`
change priories so "pam_umask.so usergroups umask=006" runs before pam_exec.so /usr/lib/security-misc/permission-lockdown 2019-08-14 05:31:58 -04:00			`Priority: 50`
run permission lockdown during pam https://forums.whonix.org/t/change-default-umask/7416 2019-08-14 04:34:03 -04:00			`Session-Type: Additional`
			`Session:`
no log needed, informative output to stdout instead 2019-08-14 05:32:58 -04:00			`optional pam_exec.so debug seteuid /usr/lib/security-misc/permission-lockdown`