shadow: set umask 077 in /etc/login.defs to avoid world-readable home dirs.
Thanks to pancake for finding this.
This commit is contained in:
parent
d2600d1411
commit
284b8a98d6
2 changed files with 2 additions and 2 deletions
|
@ -74,7 +74,7 @@ TTYPERM 0600
|
|||
#
|
||||
ERASECHAR 0177
|
||||
KILLCHAR 025
|
||||
UMASK 022
|
||||
UMASK 077
|
||||
|
||||
# Max number of login retries if password is bad
|
||||
#
|
||||
|
|
|
@ -1,7 +1,7 @@
|
|||
# Template file for 'shadow'
|
||||
pkgname=shadow
|
||||
version=4.2.1
|
||||
revision=11
|
||||
revision=12
|
||||
build_pie=yes
|
||||
build_style=gnu-configure
|
||||
configure_args="--bindir=/usr/bin --sbindir=/usr/bin
|
||||
|
|
Loading…
Reference in a new issue