mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-05-02 17:14:50 -04:00
change default umask to 027
as per: https://forums.whonix.org/t/change-default-umask/7416/47
This commit is contained in:
parent
b9127faac3
commit
ed90d8b025
5 changed files with 12 additions and 12 deletions
6
debian/control
vendored
6
debian/control
vendored
|
@ -146,7 +146,7 @@ Description: enhances misc security settings
|
|||
.
|
||||
access rights restrictions:
|
||||
.
|
||||
* The default umask is changed to 006. This allows only the owner and group
|
||||
* The default umask is changed to 027. This allows only the owner and group
|
||||
to read and write to newly created files.
|
||||
/etc/login.defs.security-misc
|
||||
/usr/share/pam-configs/usergroups-security-misc
|
||||
|
@ -157,8 +157,8 @@ Description: enhances misc security settings
|
|||
https://wiki.debian.org/UserPrivateGroups
|
||||
/usr/share/pam-configs/usergroups-security-misc
|
||||
.
|
||||
* Create home directory on login with umask 006 using
|
||||
pam_mkhomedir.so umask=006
|
||||
* Create home directory on login with umask 027 using
|
||||
pam_mkhomedir.so umask=027
|
||||
/usr/share/pam-configs/mkhomedir-security-misc
|
||||
.
|
||||
* Removes read, write and execute access for others for all users who have
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue