Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #4456

Q: Package login security problem?

Show all headers | View raw

Dear security-team,

I am wondering, why the paramter for umask is set to 022 in /etc/login.defs by 
default.

This means, all new files in the /home of a user gets rw-r--r--. 

IMO this means, the user can read and write, his own group can read and the 
rest of the world can also read these files.

I think, this is not a good policy. On a system with several users, maybe I do 
not want other users read my files i.e. documents, mails, letters whatever.

So IMHO it should be preconfigured, that all files get rw-r-----. Doing so, a 
user can be allowed to be entered into the group of the user in case he might 
be allowed to read the files from the other user.

If I am wrong in my thoughts and if I have something not correctly understood, 
I will be happy if you will enlighten me.

Thanks for reading and your hard work!

Best regards

Hans

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Q: Package login security problem? Hans <hans.ullrich@loop.de> - 2015-12-21 10:50 +0100
  Re: Q: Package login security problem? Yves-Alexis Perez <corsac@debian.org> - 2015-12-21 11:00 +0100

csiph-web