security-misc/usr/share/pam-configs/umask-security-misc#security-misc-shared
2025-09-21 16:06:11 -05:00

9 lines
318 B
Text

Name: Restrict umask to 027 for non-root users (by package security-misc-shared)
Default: yes
Priority: 100
Session-Type: Additional
Session:
[success=1 default=ignore] pam_succeed_if.so uid eq 0
optional pam_umask.so umask=027
[success=1 default=ignore] pam_succeed_if.so uid ne 0
optional pam_umask.so umask=022