Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-12 13:02:50 -04:00
Code Issues Projects Releases Packages Wiki Activity

Fix umask for pkexec-run commands

Browse source
This commit is contained in:
Aaron Rainbolt 2025-04-24 20:01:35 -05:00
parent e154d0af6d
commit 612f5f92fd
No known key found for this signature in database
GPG key ID: A709160D73C79109
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
usr/share/pam-configs/umask-security-misc
View file

@ -2,7 +2,8 @@ Name: Restrict umask to 027 (by package security-misc)
Default: yes
Priority: 100
Session-Type: Additional
Session-Interactive-Only: yes
Session:
[success=1 default=ignore] pam_succeed_if.so uid eq 0
optional pam_umask.so umask=027
[success=1 default=ignore] pam_succeed_if.so uid ne 0
optional pam_umask.so umask=022