/usr/share/doc/pam/html
NameSizeModeActions
Linux-PAM_SAG.html91960644editdlrm
sag-author.html31110644editdlrm
sag-configuration-directory.html29660644editdlrm
sag-configuration-example.html55220644editdlrm
sag-configuration-file.html175190644editdlrm
sag-configuration.html30650644editdlrm
sag-copyright.html36170644editdlrm
sag-introduction.html44460644editdlrm
sag-module-reference.html381520644editdlrm
sag-overview.html79950644editdlrm
sag-pam_access.html181200644editdlrm
sag-pam_cracklib.html202710644editdlrm
sag-pam_debug.html80870644editdlrm
sag-pam_deny.html47040644editdlrm
sag-pam_echo.html57520644editdlrm
sag-pam_env.html127960644editdlrm
sag-pam_exec.html83710644editdlrm
sag-pam_faildelay.html45900644editdlrm
sag-pam_filter.html93420644editdlrm
sag-pam_ftp.html62030644editdlrm
sag-pam_group.html101360644editdlrm
sag-pam_issue.html63780644editdlrm
sag-pam_keyinit.html70150644editdlrm
sag-pam_lastlog.html85240644editdlrm
sag-pam_limits.html181140644editdlrm
sag-pam_listfile.html105340644editdlrm
sag-pam_localuser.html54460644editdlrm
sag-pam_loginuid.html52090644editdlrm
sag-pam_mail.html77620644editdlrm
sag-pam_mkhomedir.html61960644editdlrm
sag-pam_motd.html77530644editdlrm
sag-pam_namespace.html206400644editdlrm
sag-pam_nologin.html53320644editdlrm
sag-pam_permit.html43040644editdlrm
sag-pam_pwhistory.html84760644editdlrm
sag-pam_rhosts.html64040644editdlrm
sag-pam_rootok.html51090644editdlrm
sag-pam_securetty.html64800644editdlrm
sag-pam_selinux.html83130644editdlrm
sag-pam_shells.html42610644editdlrm
sag-pam_succeed_if.html91540644editdlrm
sag-pam_time.html97250644editdlrm
sag-pam_timestamp.html68890644editdlrm
sag-pam_umask.html63180644editdlrm
sag-pam_unix.html150560644editdlrm
sag-pam_userdb.html85850644editdlrm
sag-pam_warn.html45690644editdlrm
sag-pam_wheel.html71810644editdlrm
sag-pam_xauth.html84200644editdlrm
sag-security-issues-other.html29930644editdlrm
sag-security-issues-wrong.html29630644editdlrm
sag-security-issues.html21610644editdlrm
sag-see-also.html22830644editdlrm
sag-text-conventions.html31870644editdlrm
Edit: /usr/share/doc/pam/html/sag-pam_umask.html (6318B)
6.36. pam_umask - set the file mode creation mask

6.36. pam_umask - set the file mode creation mask

pam_umask.so [ debug ] [ silent ] [ usergroups ] [ umask=mask ]

6.36.1. DESCRIPTION

pam_umask is a PAM module to set the file mode creation mask of the current environment. The umask affects the default permissions assigned to newly created files.

The PAM module tries to get the umask value from the following places in the following order:

  • umask= entry in the user's GECOS field

  • umask= argument

  • UMASK entry from /etc/login.defs

  • UMASK= entry from /etc/default/login

The GECOS field is split on comma ',' characters. The module also in addition to the umask= entry recognizes pri= entry, which sets the nice priority value for the session, and ulimit= entry, which sets the maximum size of files the processes in the session can create.

6.36.2. OPTIONS

debug

Print debug information.

silent

Don't print informative messages.

usergroups

If the user is not root and the username is the same as primary group name, the umask group bits are set to be the same as owner bits (examples: 022 -> 002, 077 -> 007).

umask=mask

Sets the calling process's file mode creation mask (umask) to mask & 0777. The value is interpreted as Octal.

6.36.3. MODULE TYPES PROVIDED

Only the session type is provided.

6.36.4. RETURN VALUES

PAM_SUCCESS

The new umask was set successfully.

PAM_SERVICE_ERR

No username was given.

PAM_USER_UNKNOWN

User not known.

6.36.5. EXAMPLES

Add the following line to /etc/pam.d/login to set the user specific umask at login:

        session optional pam_umask.so umask=0022
      

6.36.6. AUTHOR

pam_umask was written by Thorsten Kukuk <kukuk@thkukuk.de>.