Am Mon, 31 May 2010 21:05:33 -0700
schrieb Steve Langasek <[email protected]>:

> I don't understand this bug reprt.  What are you asking to have
> changed in pam_umask?
> 

pam_umask's "usergroups" functionality currently only checks if
username==groupname and GID==UID, before setting a relaxed umask.

If "usergroups" would also test if the user is not an explicit member of
its primary group (with UPGs they are not listed in /etc/groups) before
granting a relaxed umask, pam_umask would not set a too
loose umask in non-UPG system where some user and group names and IDs do
only match by acccident.

This report asks pam_umask to do this addditional test.



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to