security-misc/usr/share/pam-configs/umask-security-misc
Patrick Schleizer a8f6132bec
output
2025-04-25 03:11:39 -04:00

9 lines
311 B
Text

Name: Restrict umask to 027 for non-root users (by package security-misc)
Default: yes
Priority: 100
Session-Type: Additional
Session:
[success=1 default=ignore] pam_succeed_if.so uid eq 0
optional pam_umask.so umask=027
[success=1 default=ignore] pam_succeed_if.so uid ne 0
optional pam_umask.so umask=022