Title: pam_umask Author: [see the "AUTHOR" section] Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> Date: 01/16/2014 Manual: Linux-PAM Manual Source: Linux-PAM Manual Language: English
NAMEpam_umask - PAM module to set the file mode creation mask
- pam_umask.so [debug] [silent] [usergroups] [umask=mask]
The PAM module tries to get the umask value from the following places in the following order:
- * umask= argument
- * umask= entry in the user's GECOS field
- * UMASK= entry from /etc/default/login
- * UMASK entry from /etc/login.defs (influenced by USERGROUPS_ENAB in /etc/login.defs)
The GECOS field is split on comma ',' characters. The module also in addition to the umask= entry recognizes pri= entry, which sets the nice priority value for the session, and ulimit= entry, which sets the maximum size of files the processes in the session can create.
- Print debug information.
- Don't print informative messages.
- If the user is not root and the username is the same as primary group name, the umask group bits are set to be the same as owner bits (examples: 022 -> 002, 077 -> 007). Note that using this option explicitly is discouraged. pam_umask enables this functionality by default if /etc/login.defs enables USERGROUPS_ENAB, and the umask is not set explicitly in other places than /etc/login.defs (this is compatible with login's behaviour without PAM).
- Sets the calling process's file mode creation mask (umask) to mask & 0777. The value is interpreted as Octal.
MODULE TYPES PROVIDED
Only the session type is provided.
- The new umask was set successfully.
- No username was given.
- User not known.
Add the following line to /etc/pam.d/login to set the user specific umask at login:
session optional pam_umask.so umask=0022
pam_umask was written by Thorsten Kukuk <firstname.lastname@example.org>.