Bug 1807957 - [RFE] Please set UMASK to 022 in login.defs
Summary: [RFE] Please set UMASK to 022 in login.defs
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: shadow-utils
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Iker Pedrosa
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1722387
TreeView+ depends on / blocked
 
Reported: 2020-02-27 14:48 UTC by Ondrej Vasik
Modified: 2020-04-01 16:33 UTC (History)
3 users (show)

Fixed In Version: shadow-utils-4.8.1-2.fc32
Clone Of:
Environment:
Last Closed: 2020-04-01 00:18:50 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Ondrej Vasik 2020-02-27 14:48:34 UTC
Description of problem:
At the moment, Fedora sets umask through /etc/profile (and other files provided by setup package). This ooverrides the proper way of setting umask via pam. I would like to drop this from setup files. However, based on comment from PAM maintainer ( https://bugzilla.redhat.com/show_bug.cgi?id=1722387#c4 ) we need to set UMASK in login.defs file. 

Can you please update shadow-utils, so umask is defined in login.defs and the hacks can be dropped from setup? Thanks!

Comment 1 Tomas Mraz 2020-02-27 14:52:56 UTC
This is blocked on update to upstream version 4.8.1 which brings HOME_MODE directive support. We need to set HOME_MODE to 077 and UMASK then can be changed to 022.

Comment 2 Fedora Update System 2020-03-23 12:40:53 UTC
FEDORA-2020-a84ba2b0ea has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2020-a84ba2b0ea

Comment 3 Fedora Update System 2020-03-24 01:52:08 UTC
FEDORA-2020-a84ba2b0ea has been pushed to the Fedora 32 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-a84ba2b0ea`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-a84ba2b0ea

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2020-03-27 15:58:17 UTC
FEDORA-2020-4ece7634c3 has been pushed to the Fedora 32 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-4ece7634c3`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-4ece7634c3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2020-04-01 00:18:50 UTC
FEDORA-2020-4ece7634c3 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 6 Fedora Update System 2020-04-01 16:33:37 UTC
FEDORA-2020-4ece7634c3 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.