[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20201008003001.GE378617@millbarge>
Date: Thu, 8 Oct 2020 00:30:01 +0000
From: Seth Arnold <seth.arnold@...onical.com>
To: oss-security@...ts.openwall.com
Subject: Re: Debian FEATURE: /home/loser is with permissions
755, default umask 0022
On Wed, Oct 07, 2020 at 04:09:59PM -0500, Bob Friesenhahn wrote:
> Ubuntu Linux (a Debian derivative) has changed the default. However, we
> found that the Ubuntu default caused problems for us while building our
> software, and so we changed them back.
Hello Bob, can you please share some details on this?
I expect Ubuntu home directories to be 755 by default:
https://wiki.ubuntu.com/SecurityTeam/Policies#Permissive_Home_Directory_Access
And while it is very difficult to say "the umask", given that every
process's umask setting depends upon the actions of not only itself but
also its nearest parent to use the umask(2) syscall, but:
$ grep ^UMASK /etc/login.defs
UMASK 022
$ systemctl show -p UMask '*' | sort -u
UMask=0022
I'd certainly expect the default settings to be a umask of 0022, there's a
variety of umasks on the systems I've got easy access to:
$ sudo grep -h Umask /proc/*/status | sort -u
Umask: 0000
Umask: 0002
Umask: 0022
Umask: 0077
Umask: 0777
$ sudo grep -h Umask /proc/*/status | sort -u
Umask: 0000
Umask: 0002
Umask: 0022
Umask: 0077
$ sudo grep -h Umask /proc/*/status | sort -u
Umask: 0000
Umask: 0002
Umask: 0022
Thanks
Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
