sudo default umask 006

https://forums.whonix.org/t/change-default-umask/7416/43
Kicksecure · Aug 16, 2019 · 224f957 · 224f957
1 parent 17cfcb6
commit 224f957
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/debian/control b/debian/control
@@ -149,6 +149,7 @@ Description: enhances misc security settings
  to read and write to newly created files.
  /etc/login.defs.security-misc
  /usr/share/pam-configs/usergroups-security-misc
+ /etc/sudoers.d/umask-security-misc
  .
   * Enables pam_umask.so usergroups so group permissions are same as user
  permissions. Debian by default uses User Private Groups (UPG).

diff --git a/etc/sudoers.d/umask-security-misc b/etc/sudoers.d/umask-security-misc
@@ -0,0 +1,5 @@
+## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
+## See the file COPYING for copying conditions.
+
+Defaults umask = 006
+Defaults umask_override