Hello, I think it would be more secure to change default umask from 022 to 077 for every normal user by default. It would be a matter of modifying umask in ~/.bash_profile Further consideration and testing could cover: -root account -/etc/bashrc -/etc/profile (except fstab, mtab) -other files in /etc/ have a nice day, Zbigniew Luszpinski