Bug 25247 - Add umask=077 for pam_mkhomedir.so
Summary: Add umask=077 for pam_mkhomedir.so
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: pam (show other bugs)
Version: unstable
Hardware: all Linux
: P3 normal
Assignee: placeholder@altlinux.org
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-03-17 16:52 MSK by Mikhail Efremov
Modified: 2011-03-18 02:12 MSK (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mikhail Efremov 2011-03-17 16:52:15 MSK 
Сейчас домашние каталоги, создаваемые pam_mkhomedir, создаются с умолчательным umask 022. Просьба добавить для pam_mkhomedir.so umask=077 в system-auth-krb5 и system-auth-ldap для соответствия умолчаниям в /etc/login.defs.
Comment 1 Mikhail Efremov 2011-03-17 17:07:45 MSK 
Хотя может стоит поменять сами умолчания в pam_mkhomedir.
Comment 2 Dmitry V. Levin 2011-03-18 01:56:25 MSK 
Лучше синхронизировать умолчание с useradd.
Comment 3 Repository Robot 2011-03-18 02:12:08 MSK 
pam-1.1.3-alt3 -> sisyphus:

* Fri Mar 18 2011 Dmitry V. Levin <ldv@altlinux> 1.1.3-alt3
- pam_mkhomedir: changed default umask from 0022 to 0077 (closes: #25247).