<html>
<head>
</head>
<body>
Okay, thanks I found this in /etc/profile:<br>
<br>
umask 022<br>
<br>
Then changed it to:<br>
<br>
umask 027<br>
<br>
What I'm looking for is the privacy of each user from all other users except
root.<br>
<br>
What would be the appropriate "umask" to achieve that without adversly affecting
the operation of the system?<br>
<br>
I found the following explanation:<br>
<br>
<a class="moz-txt-link-freetext" href="http://www.tldp.org/HOWTO/Security-HOWTO-5.html">http://www.tldp.org/HOWTO/Security-HOWTO-5.html</a><br>
<br>
<h2><i><a name="ss5.1">5.1 Umask Settings</a>
</i></h2>
<p><i>The <code>umask</code> command can be used to determine the default
file creation mode on your system. It is the octal complement of the desired
file mode. If files are created without any regard to their permissions settings,
the user could inadvertently give read or write permission to someone that
should not have this permission. Typical <code>umask</code> settings include
<code>022</code>, <code>027</code>, and <code>077</code> (which is the most
restrictive). Normally the umask is set in <code>/etc/profile</code>, so
it applies to all users on the system. The file creation mask can be calculated
by subtracting the desired value from 777. In other words, a umask of 777
would cause newly-created files to contain no read, write or execute permission
for anyone. A mask of 666 would cause newly-created files to have a mask
of 111. For example, you may have a line that looks like this: </i></p>
<blockquote><i><code>
<pre> # Set the user's default umask
umask 033
</pre>
</code></i></blockquote>
<i> Be sure to make root's umask <code>077</code>, which will disable
read, write, and execute permission for other users, unless explicitly changed
using <code>chmod</code>. In this case, newly-created directories would
have 744 permissions, obtained by subtracting 033 from 777. Newly-created
files using the 033 umask would have permissions of 644. </i>
<p><i>If you are using Red Hat, and adhere to their user and group ID creation
scheme (User Private Groups), it is only necessary to use <code>002</code>
for a <code>umask</code>. This is due to the fact that the default configuration
is one user per group. </i></p>
<h2><i><a name="ss5.2"></a>
</i></h2>
<br>
<br>
David Jackson wrote:<br>
<blockquote type="cite" cite="mid:3591.63.165.196.23.1022088418.cqhost@webmail.cqhost.com">
<pre wrap="">Joe --<br>The default file permission are set by umask usally in /etc/profile?<br>How log does it take for perm to be changed? If it regular interval<br>then theres a cron running, if it's after reboot there may be something<br>in on of the rc scripts.<br><br>David<br><br><br></pre>
<blockquote type="cite">
<pre wrap="">The problem I'm having is Mandrake 8.2 is changing the permissions on<br>my "/home/user" folder without me giving permission. I set it to 770<br>and then shortly thereafter, the system changes it to 755. This is<br>not what I want, and I don't seem to be able to fix it.<br></pre>
</blockquote>
<pre wrap=""><!----><br><br><br><br>_______________________________________________<br>CLUE-Tech mailing list<br><a class="moz-txt-link-abbreviated" href="mailto:CLUE-Tech@clue.denver.co.us">CLUE-Tech@clue.denver.co.us</a><br><a class="moz-txt-link-freetext" href="http://clue.denver.co.us/mailman/listinfo/clue-tech">http://clue.denver.co.us/mailman/listinfo/clue-tech</a><br><br></pre>
</blockquote>
<br>
</body>
</html>