Umask on user

ashish_1985@ymail.com · 09-13-2011, 07:15 AM

Hello

Here in my organization all pc are ubuntu. Now, I want to develop umask on user.

scenario is that person (who loged in) can only access his home directory not others home directory.

Please Guide me.

unSpawn · 09-13-2011, 08:25 AM

/etc/login.defs and /etc/profile (and other shells) umask setting should be (0)027, then chmod 0700 all users homes: 'find /home/* -maxdepth 0 -type d -print0 | xargs -0 -iD chmod 0700 'D';'. Beware any user may change it back to 1777 or whatever else as they own their own home directory. Nothing keeps you from having a PAM script run on user login to correct things or set an inotify watch to change it back though. (FWIW chrooting users probably won't be efficient as you need to copy in all necessary binaries.)

ashish_1985@ymail.com · 09-14-2011, 04:05 AM

Hi

Thanks for reply, I find the files but not content which you mentioned. Please specify

unSpawn · 09-15-2011, 11:25 AM

In /etc/login.defs that would be a line

Code:

UMASK 027

and in say /etc/bashrc a like

Code:

umask 0027

See 'man 1p umask', 'man login.defs' and your shells manual pages for more details.