Bug#581729: [SQUEEZE] Document the umask change for new installs
- To: 581729@bugs.debian.org
- Cc: Andrei Popescu <andreimpopescu@gmail.com>
- Subject: Bug#581729: [SQUEEZE] Document the umask change for new installs
- From: Charles Plessy <plessy@debian.org>
- Date: Sun, 2 Jan 2011 02:47:31 +0900
- Message-id: <[🔎] 20110101174731.GA539@merveille.plessy.net>
- Reply-to: Charles Plessy <plessy@debian.org>, 581729@bugs.debian.org
- In-reply-to: <20100515111643.GF19171@think.homelan>
- References: <20091124014626.GD29774@kunpuu.plessy.org> <20091124025256.GA11308@gnu.kitenet.net> <20091124071717.GD9409@rivendell> <87ocmqnghe.fsf@windlord.stanford.edu> <1273881425.31170.28.camel@fermat.scientia.net> <87wrv6vx2y.fsf@windlord.stanford.edu> <1273884940.31170.81.camel@fermat.scientia.net> <87sk5tzqmb.fsf@windlord.stanford.edu> <20100515064129.GJ3444@mykerinos.kheops.frmug.org> <20100515111643.GF19171@think.homelan>
Le Sat, May 15, 2010 at 02:16:43PM +0300, Andrei Popescu a écrit :
> Package: release-notes
> Severity: whishlist
> Tags: squeeze
> X-Debbugs-CC: debian-devel@lists.debian.org
>
> On Sat,15.May.10, 08:41:29, Christian PERRIER wrote:
>
> > More generally speaking, this umask change probably deserves to be
> > mentioned in the Release Notes....along with a good rationale about
> > why, no, this isn't Debian giving up to years of being security-wise.
>
> Suggested text:
>
> ---
> The default 'umask' for new installs is changed
> ===============================================
>
> Starting with base-files version 5.4 the default umask for new installs
> is 0002 instead of 0022 for regular users (system users, like the ones
> used for various daemons and services are not affected).
Dear all,
because base-files does not set umask anymore since version 5.7, and because
the default umask is currently 0022 again (through login.defs and pam_umask), I
propose to close this bug. Alternatively, I can submit a patch to document the
above.
Have a nice day and a happy new year 2011.
--
Charles Plessy
Illkirch, France
Reply to: