Bug 1807957

Summary:	[RFE] Please set UMASK to 022 in login.defs
Product:	[Fedora] Fedora	Reporter:	Ondrej Vasik <ovasik>
Component:	shadow-utils	Assignee:	Iker Pedrosa <ipedrosa>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	ipedrosa, pvrabec, tmraz
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	shadow-utils-4.8.1-2.fc32	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-04-01 00:18:50 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1722387

Description Ondrej Vasik 2020-02-27 14:48:34 UTC

Description of problem:
At the moment, Fedora sets umask through /etc/profile (and other files provided by setup package). This ooverrides the proper way of setting umask via pam. I would like to drop this from setup files. However, based on comment from PAM maintainer ( https://bugzilla.redhat.com/show_bug.cgi?id=1722387#c4 ) we need to set UMASK in login.defs file. 

Can you please update shadow-utils, so umask is defined in login.defs and the hacks can be dropped from setup? Thanks!

Comment 1 Tomas Mraz 2020-02-27 14:52:56 UTC

This is blocked on update to upstream version 4.8.1 which brings HOME_MODE directive support. We need to set HOME_MODE to 077 and UMASK then can be changed to 022.

Comment 2 Fedora Update System 2020-03-23 12:40:53 UTC

FEDORA-2020-a84ba2b0ea has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2020-a84ba2b0ea

Comment 3 Fedora Update System 2020-03-24 01:52:08 UTC

FEDORA-2020-a84ba2b0ea has been pushed to the Fedora 32 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-a84ba2b0ea`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-a84ba2b0ea

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2020-03-27 15:58:17 UTC

FEDORA-2020-4ece7634c3 has been pushed to the Fedora 32 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-4ece7634c3`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-4ece7634c3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2020-04-01 00:18:50 UTC

FEDORA-2020-4ece7634c3 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 6 Fedora Update System 2020-04-01 16:33:37 UTC

FEDORA-2020-4ece7634c3 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.