/etc/login.defs: set the mode of new home directories to 700

2012-07-13 10:41:48 -04:00 · 2012-07-13 10:41:48 -04:00 · 7fca8ceaf8
parent 8544ba285d
commit 7fca8ceaf8
1 changed files with 3 additions and 0 deletions
--- a/modules/programs/shadow.nix
+++ b/modules/programs/shadow.nix
@ -21,6 +21,9 @@ let
      TTYGROUP     tty
      TTYPERM      0620

+      # Ensure privacy for newly created home directories.
+      UMASK        077
+
      # Uncomment this to allow non-root users to change their account
      #information.  This should be made configurable.
      #CHFN_RESTRICT frwh