btw: What happened to the idea of movin umask completely away from /etc/profile? I mean regardless of the discussion about UPGs and which value is the "best" default for umask, I found it to be a good idea to drop it there. Can someone please explain me the reason why login.defs isn't used for that? Cheers, Chris.