security-misc/usr/share/pam-configs/umask-security-misc
2025-04-24 20:01:35 -05:00

9 lines
292 B
Text

Name: Restrict umask to 027 (by package security-misc)
Default: yes
Priority: 100
Session-Type: Additional
Session:
[success=1 default=ignore] pam_succeed_if.so uid eq 0
optional pam_umask.so umask=027
[success=1 default=ignore] pam_succeed_if.so uid ne 0
optional pam_umask.so umask=022