** Description changed:

  The pam_umask.so module determines the umask (from system and user
  config files) and sets it for users accordingly.
  
+ from /etc/login.defs:
+ # the use of pam_umask is recommended as the solution which
+ # catches all these cases on PAM-enabled systems.
+ 
  The umask itself should not be set in /etc/pam.d/common-account, but
- pam_umask needs to be called from there. The system's default UMASK is
- set in /etc/login.defs, and setting it here would override it and all
- user specific configs (see man pam_umask).
+ pam_umask needs to be called from there.
+ 
+ The system's default UMASK remains in /etc/login.defs, setting it in
+ common-account would override login.defs *and* any user specific configs
+ in gecos fields, see man pam_umask.
  
  The option "usergroups" is neccessary to have pam_umask check if the
  user has a private user group and re-enables appropriate group
  permission setting for save and easy user collaboration (Info in Bug
  #252351).
  
  The line needed to call pam_umask in /etc/pam.d/common-account is:
  session optional pam_umask.so usergroups
  
  (This reflects the settings that are in /etc/login.defs, but have not
  been working since pam broke it.)

-- 
pam_umask.so missing in common-account
https://bugs.launchpad.net/bugs/253096
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to