shadow: set umask 077 in /etc/login.defs to avoid world-readable home dirs.

Thanks to pancake for finding this.
This commit is contained in:
Juan RP 2015-06-05 11:26:55 +02:00
parent d2600d1411
commit 284b8a98d6
2 changed files with 2 additions and 2 deletions

View File

@ -74,7 +74,7 @@ TTYPERM 0600
#
ERASECHAR 0177
KILLCHAR 025
UMASK 022
UMASK 077
# Max number of login retries if password is bad
#

View File

@ -1,7 +1,7 @@
# Template file for 'shadow'
pkgname=shadow
version=4.2.1
revision=11
revision=12
build_pie=yes
build_style=gnu-configure
configure_args="--bindir=/usr/bin --sbindir=/usr/bin