Revert "Revert "set default umask to 027""

This reverts commit f8913ceb2e.
This commit is contained in:
Patrick Schleizer 2023-11-03 09:45:12 -04:00
parent f8913ceb2e
commit 07540db90d
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 8 additions and 1 deletions

2
debian/control vendored
View File

@ -14,7 +14,7 @@ Rules-Requires-Root: no
Package: security-misc
Architecture: all
Depends: python3, libglib2.0-bin, libpam-runtime, sudo, adduser, libcap2-bin,
Depends: python3, libglib2.0-bin, libpam-runtime, libpam-umask, sudo, adduser, libcap2-bin,
apparmor-profile-dist, helper-scripts, libpam-modules-bin,
secure-delete, dmsetup, ${misc:Depends}
Replaces: tcp-timestamps-disable, anon-gpg-tweaks, swappiness-lowest

View File

@ -0,0 +1,7 @@
Name: Restrict umask to 027 (by package security-misc)
Default: yes
Priority: 100
Session-Type: Additional
Session-Interactive-Only: yes
Session:
optional pam_umask.so umask=027