Instead of setting teh default umask at /etc/profile, let pam_umask.so do it's job. Also allow usergroups!
17 lines
488 B
Text
17 lines
488 B
Text
#%PAM-1.0
|
|
|
|
auth required pam_unix.so try_first_pass nullok
|
|
auth optional pam_permit.so
|
|
auth required pam_env.so
|
|
|
|
account required pam_unix.so
|
|
account optional pam_permit.so
|
|
account required pam_time.so
|
|
|
|
password required pam_unix.so try_first_pass nullok sha512 shadow
|
|
password optional pam_permit.so
|
|
|
|
session optional pam_umask.so usergroups
|
|
session required pam_limits.so
|
|
session required pam_unix.so
|
|
session optional pam_permit.so
|