Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 8 down vote favorite

What is your default umask set to? Did you run into any problem setting a stricter default umask?

share|improve this question
Tell us more about who the users are and what the security requirements are. Do the users need to collaborate? Or are they strangers who should actually be separated by far more than unix file permissions? – nealmcb Jan 10 '11 at 2:45
@nealmcb they should be separated by far more than unix file permissions. most of them don't get shell access. – Olivier Lalonde Jan 10 '11 at 7:24

1 Answer

up vote 5 down vote

027 on most systems. This gives a default of rw-,r--,--- which is suitable for me. I have seen some environments use 077, but unless the users are very limited in what the can do (so why give them a shell at all?) or experienced it just causes helpdesk/IT issues.

share|improve this answer
2  
Linux and some of the BSDs seem to have got this weird thing recently where the default group of each user is named after that user and has no members, so 007 means no-one can read files (by default). – Graham Lee Jan 11 '11 at 19:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.