On Thu, 8 Apr 2010, Petter Reinholdtsen wrote: > Or perhaps we should get the umask setting dropped from /etc/profile, > and use some pam module to control the global umask setting? I think so, yes. For now, I'm going to put the profile.d thing after the umask setting so that you can override it. However, if we agree that it's better to remove umask from /etc/profile and use PAM, I'll happily remove it afterwards.