Lunar ISO, security - umask change.

Stefan Wold ratler at lunar-linux.org
Thu Jun 7 07:42:24 CEST 2007


> > > I'm not inclined to merge these things that easily, we made this choice a
> > > long time ago and I spent quite some time looking at other distro's and
> > > documentation before I picked what we currently have.
> > >
> > > Current Fedora still has 022, I assume RH too.
> > >
> > > Auke
> 
> > I can confirm RHEL 5 uses umask 22 in /etc/bashrc.
> 
> OK. You have right. But how about /home/*/.bash_profile?
> Haven't find anything wrong with umask 077 set.
> How other distros set umask inside home directories?

In my opinion it should be up to the administrator of the box to decide
wether or not to enharden the security, such as changing default umask
for users and other stuff. No need to enforce that for normal lunar
users. I say 022 is safe enough.

/Stefan



More information about the Lunar-dev mailing list