Re: [SOLVED] Re: How add key of 3rd party repo?
Hi David,
this is a very good and value hint! What you are telling is very reasonable
and makes fully sense. Yes, in the past I olayed aroud mith umask, and it can
really happen, that I messed up things by doing so.
I will recheck my settings and if there are any missettings, of course correct
them to debian's actual default settings.
Besides, i am still concerned about the default umask settings, but this I
already mentioned and will not be reopened again.
Again: Thank you very much for pointing me to this!
Made me happy!
Best regards
Hans
> From the clues left dotted around, my bet is that you've messed up
> your system with the way you become root, affecting its umask.
>
> A couple of months ago (and back in 2020), you were exhorting Debian
> to set a mask for users of at least 027, and I'm wondering whether,
> in your case, it might have been changed to 077 since around one of
> those times.
>
> Back in 2014, you had the permissions on dpkg set to -rwxr-x---,
> which would correspond to a umask of 027, so perhaps you had already
> tightened your system from the Debian default, 022, to 027 by then.
>
> So it now comes down to why system components are getting the user's
> umask applied to them. For that, I looked back to 2014 when you seemed
> to be a bit more forthcoming with pasting prompts into your posts.
>
> Your first post in the thread¹ starts with:
> | Ok, so let’s start as root:
> |
> | su -p
> | root@protheus2:~# LANG=C mediathekview
>
> Well, three cases of su are:
>
> ~$ umask
> 0027 ← the securer default was set for this user.
> ~$ su
> Password:
> /home/auser# umask
> 0022 ← correct
> /home/auser#
> exit
> ~$ su -
> Password:
> ~# umask
> 0022 ← correct
> ~#
> logout
> ~$ su -p
> Password:
> ~# umask
> 0027 ← wrong for root
> ~#
> exit
> ~$
>
> So I'm guessing that you've been installing things after having become
> root with -p. I don't know whether APT and dpkg can themselves modify
> any excessively restrictive umask, and I'm unwilling to test that here.
>
> ¹ https://lists.debian.org/debian-user/2014/07/msg00053.html
>
> Cheers,
> David.
Reply to: