Unmask Problems - Hoary 5.01

['Forum Post]

Does anybody manage to actually get the module working?

I tried inserting the row (before the last 'session reqired' line) in
common-session. Then I get the umask I want when I log on to a console.

Within Gnome it won't do anything. I also tried to add the line to the
gdm entry in pam.d. The only effect I can get is that the gdm login
stops working if the line is changed to 'session required'. (You could
easily lock yourself completely out, so be sure to have an working
console before experimenting too much.)

Edit:

Continued to look around. There is a entry for this issue in the
bugzilla https://bugzilla.ubuntu.com/show_bug.cgi?id=19799. 

Until it is fixed, there is a workaround
Tiziano Tissino Wrote: 
> To fix the problem, I had to create the file .gnomerc on each user
> profile. On
> that file, I added the following line:
> umask 0007

Michael R. Head Wrote: 
> OK, I just saw this in login.defs:
> 
> # UMASK usage is discouraged because it catches only some classes of
> user
> # entries to system, in fact only those made through login(1), while
> setting
> # umask in shell rc file will catch also logins through su, cron, ssh
> etc.
> #
> # At the same time, using shell rc to set umask won't catch entries
> which use
> # non-shell executables in place of login shell, like /usr/sbin/pppd
> for "ppp"
> # user and alike.
> #
> # Therefore the use of pam_umask is recommended (Debian package
> libpam-umask)
> # as the solution which catches all these cases on PAM-enabled systems.
> 
> I guess you want http://packages.ubuntu.com/breezy/admin/libpam-umask
> 
> And then you want to edit whichever files in /etc/pam.d/ (perhaps
> 'common-session') that you want to have umask set. Here's what the line
> should look like:
> 
> session    optional     pam_umask.so umask=002
> 
> 
> On Mon, 2006-01-02 at 13:40 -0600, Bobby Sanders wrote:
> > On Mon, 2006-01-02 at 14:14 -0500, Michael R. Head wrote:
> > > On Mon, 2006-01-02 at 12:53 -0600, Bobby Sanders wrote:
> > > > I want my default unmask to be 002 for all the users on my small
> office
> > > > system.  I have tried changing it in /etc/login.defs, i.e I
> changed the
> > > > line;
> > > > 
> > > > UNMASK	022
> > > > 
> > > > to
> > > > 
> > > > UNMASK	002
> > > > 
> > > > rebooted, created a new file and the permissions were still
> -rw-r--r--
> > > > 
> > > > What am I missing?  I know this has worked on other *nixs in the
> > > > past!  :(
> > > 
> > > Well, first of all, that should be UMASK, not UNMASK, second of
> all,
> > 
> > Thanks for pointing out my mispulling. :)
> > 
> > > that line is by default commented out, so maybe you have to
> uncomment
> > > it.
> > 
> > >From my /etc/login.defs file:
> > 
> > "...
> > # Prefix these values with "0" to get octal, "0x" to get hexadecimal.
> > #
> > ERASECHAR       0177
> > KILLCHAR        025
> > UMASK           022
> > #ULIMIT         2097152
> > 
> > #
> > # Password aging controls:
> > ..."
> > 
> > When I change the 022 to 002.  Nothing happens.
> > 
> > >  Third of all, double check that you aren't setting a umask in
> > > your .bash_profile or .bashrc or /etc/bash.bashrc.
> > 
> > Just checked them again.  No mention of umask there except
> > for .bashrc_profile, which is commented out.  I tried uncommenting it
> > and changing the 022 to 002.  Still no luck.  Perhaps I made a typo.
> > I'll try it again.
> > 
> > Thanks,
> > 
> > Bobby
> > 
> > 
> -- 
> Michael R. Head <burner (AT) suppressingfire (DOT) org>
> GPG: http://www.suppressingfire.org/~burner/gpg.key.txt [0x4C9DA1D0]
> 
> -- 
> ubuntu-users mailing list
> ubuntu-users (AT) lists (DOT) ubuntu.com
> http://lists.ubuntu.com/mailman/listinfo/ubuntu-users
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
> 
> iD8DBQBDuYdtNXGzGEydodARAn9GAKCBigc75vQad92EE3zgODhaNn9IYACeL+gf
> jBUXWnu1tnDWMfyhZ+FPIP0=
> =9g+3
> -----END PGP SIGNATURE-----


-- 
sundman