Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is your default umask set to? Did you run into any problem setting a stricter default umask?

share|improve this question
Tell us more about who the users are and what the security requirements are. Do the users need to collaborate? Or are they strangers who should actually be separated by far more than unix file permissions? – nealmcb Jan 10 '11 at 2:45
@nealmcb they should be separated by far more than unix file permissions. most of them don't get shell access. – Olivier Lalonde Jan 10 '11 at 7:24

027 on most systems. This gives a default of rw-,r--,--- which is suitable for me. I have seen some environments use 077, but unless the users are very limited in what the can do (so why give them a shell at all?) or experienced it just causes helpdesk/IT issues.

share|improve this answer
Linux and some of the BSDs seem to have got this weird thing recently where the default group of each user is named after that user and has no members, so 007 means no-one can read files (by default). – user185 Jan 11 '11 at 19:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.