Am Fri, 28 May 2010 00:15:17 +0200 schrieb "C. Gatzemeier" <c.gatzemeier@tu-bs.de>: > but now, if we > activate pam_umask, it will read UMASK 022 from login.defs again (and > relax it conditionally). err, that is the case if you keep the UMASK 022 and "usergroups" option (the defaults). Of course you can set a fixed UMASK 002 and remove "usergroups" from the pam_umask call, and there will be no umask relaxation.