Lunar ISO, security - umask change.

[Zbigniew Luszpinski]

Wednesday 06 of June 2007 01:59:21 Dennis Veatch wrote:
> On Tuesday 05 June 2007 07:12:36 pm Kok, Auke wrote:
> > Zbigniew Luszpinski wrote:
> > > Hello,
> > >
> > > I think it would be more secure to change default umask from 022 to 077
> > > for every normal user by default. It would be a matter of modifying
> > > umask in ~/.bash_profile
> >
> > I'm not inclined to merge these things that easily, we made this choice a
> > long time ago and I spent quite some time looking at other distro's and
> > documentation before I picked what we currently have.
> >
> > Current Fedora still has 022, I assume RH too.
> >
> > Auke

> I can confirm RHEL 5 uses umask 22 in /etc/bashrc.

OK. You have right. But how about /home/*/.bash_profile?
Haven't find anything wrong with umask 077 set.
How other distros set umask inside home directories?

have a nice day,
Zbigniew Luszpinski