[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: UPG and the default umask

Willi Mann <foss-ml@wm1.at> writes:
> Russ Allbery wrote:

>> The purpose of UPG is not to use the user private group for any sort of
>> access control.  Rather, the point is to put each user in a group where
>> they're the only member so that they can safely use a default umask of
>> 002 without giving someone else write access to all their files.

> Is it possible to detect whether an account is configured properly based
> on the UPG idea? If yes, wouldn't it then make sense to only set umask
> 002 if a proper UPG account is detected, otherwise 022? This would avoid
> putting non-UPG systems on danger.

That's a good idea.  I'm not sure if all UNIX group systems allow one to
ask how many users are a member of a particular group, but if there's a
way to ask that question at least in those group systems that support it,
the implementation should be fairly straightforward.

Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: