mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-01-13 02:09:29 -05:00
Revert "Revert "set default umask to 027""
This reverts commit f8913ceb2e
.
This commit is contained in:
parent
f8913ceb2e
commit
07540db90d
2
debian/control
vendored
2
debian/control
vendored
@ -14,7 +14,7 @@ Rules-Requires-Root: no
|
|||||||
|
|
||||||
Package: security-misc
|
Package: security-misc
|
||||||
Architecture: all
|
Architecture: all
|
||||||
Depends: python3, libglib2.0-bin, libpam-runtime, sudo, adduser, libcap2-bin,
|
Depends: python3, libglib2.0-bin, libpam-runtime, libpam-umask, sudo, adduser, libcap2-bin,
|
||||||
apparmor-profile-dist, helper-scripts, libpam-modules-bin,
|
apparmor-profile-dist, helper-scripts, libpam-modules-bin,
|
||||||
secure-delete, dmsetup, ${misc:Depends}
|
secure-delete, dmsetup, ${misc:Depends}
|
||||||
Replaces: tcp-timestamps-disable, anon-gpg-tweaks, swappiness-lowest
|
Replaces: tcp-timestamps-disable, anon-gpg-tweaks, swappiness-lowest
|
||||||
|
7
usr/share/pam-configs/umask-security-misc
Normal file
7
usr/share/pam-configs/umask-security-misc
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
Name: Restrict umask to 027 (by package security-misc)
|
||||||
|
Default: yes
|
||||||
|
Priority: 100
|
||||||
|
Session-Type: Additional
|
||||||
|
Session-Interactive-Only: yes
|
||||||
|
Session:
|
||||||
|
optional pam_umask.so umask=027
|
Loading…
Reference in New Issue
Block a user