Le 2021-08-24 15:17, Jonathan Billings a écrit :
On Tue, Aug 24, 2021 at 10:28:17AM +0200, François Patte wrote:The only file talking of umask is /etc/bashrc: if [ $UID -gt 199 ] && [ "`id -gn`" = "`id -un`" ]; then umask 002 else umask 022 fi I don't understand the meaning....It means: If your UID is greater than 199 *AND* your username and group name are the same, set the umask to 002, otherwise, set the umask to 022. This makes sense. System accounts are usually below UID 200, so you want a more restrictive umask on them. As for the logic about user == group, if your group isn't the same as your username, then you are likely to be in a UNIX group that has multiple members, so it is a good idea to set your umask to 022 so files you create aren't writable by others in your group by default. But if your group is the same as your username, most likely there won't be other users with the same group ID, so there is little risk to having group-writable files created by default. As for why your system has a umask of 077, that sounds like you've made some change to your configuration someplace. If you don't see it in one of your dot files, /etc/bashrc or /etc/profile.d, the pam_umask.so in /etc/pam.d/postlogin looks for umask from the following locations: * umask= entry in the user's GECOS field * umask= argument * UMASK entry from /etc/login.defs * UMASK= entry from /etc/default/login (Apparently the GECOS field in the pwent can be split on a comma and have metadata like umask= in it. Check 'man pam_umask' for more details) I suggest checking those places too.
Thank you for your explanations. I made some progress in my investigations: the problem seems to be a change in the "su" command from f32 to f34: my personnal umask is 0077 and I use to log as root using the command "su -". Until f32 this way of doing gave a root login with all environment variables of the root account (including the UMASK). As far as I can see this is no more the case in f34.... Where is the config for the "su" command? And is it possible to change this behavior?
Thank you. -- François Patte UFR de mathématiques et informatique Laboratoire CNRS MAP5, UMR 8145 Université Paris Descartes 45, rue des Saints Pères F-75270 Paris Cedex 06 Tél. +33 (0)6 7892 5822 _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
