change default umask to 027

as per:

https://forums.whonix.org/t/change-default-umask/7416/47
This commit is contained in:
Patrick Schleizer 2019-08-17 09:55:20 +00:00
parent b9127faac3
commit ed90d8b025
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
5 changed files with 12 additions and 12 deletions

6
debian/control vendored
View file

@ -146,7 +146,7 @@ Description: enhances misc security settings
.
access rights restrictions:
.
* The default umask is changed to 006. This allows only the owner and group
* The default umask is changed to 027. This allows only the owner and group
to read and write to newly created files.
/etc/login.defs.security-misc
/usr/share/pam-configs/usergroups-security-misc
@ -157,8 +157,8 @@ Description: enhances misc security settings
https://wiki.debian.org/UserPrivateGroups
/usr/share/pam-configs/usergroups-security-misc
.
* Create home directory on login with umask 006 using
pam_mkhomedir.so umask=006
* Create home directory on login with umask 027 using
pam_mkhomedir.so umask=027
/usr/share/pam-configs/mkhomedir-security-misc
.
* Removes read, write and execute access for others for all users who have