diff options
| author | Nico Berlee <nico.berlee@on2it.net> | 2021-08-07 12:57:50 +0200 |
|---|---|---|
| committer | Artturin <Artturin@artturin.com> | 2021-11-06 17:45:00 +0200 |
| commit | 90bac670c0ef7b474841c2f929a2e0d63059e8a0 (patch) | |
| tree | 9aedfa07c7668a8cd8a66a787d8216756a41968c /nixos/doc | |
| parent | e62c9ce9328dfea2ca48d84ec40680f18a53d100 (diff) | |
nixos/pam: pam_mkhomedir umask to 0077
pam_mkhomedir should create homedirs with the same umask as the rest
of the system. Currently it creates homedirs with go+rx which makes
it readable for other non-privileged users.
Diffstat (limited to 'nixos/doc')
| -rw-r--r-- | nixos/doc/manual/from_md/release-notes/rl-2111.section.xml | 8 | ||||
| -rw-r--r-- | nixos/doc/manual/release-notes/rl-2111.section.md | 2 |
2 files changed, 10 insertions, 0 deletions
diff --git a/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml b/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml index e3cbb451acdd..753614ea58a1 100644 --- a/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml +++ b/nixos/doc/manual/from_md/release-notes/rl-2111.section.xml @@ -1851,6 +1851,14 @@ Superuser created successfully. </listitem> </itemizedlist> </listitem> + <listitem> + <para> + <literal>security.pam.services.<name>.makeHomeDir</literal> + now uses <literal>umask=0077</literal> instead of + <literal>umask=0022</literal> when creating the home + directory. + </para> + </listitem> </itemizedlist> </section> </section> diff --git a/nixos/doc/manual/release-notes/rl-2111.section.md b/nixos/doc/manual/release-notes/rl-2111.section.md index cb77c193042a..2c27356bfef4 100644 --- a/nixos/doc/manual/release-notes/rl-2111.section.md +++ b/nixos/doc/manual/release-notes/rl-2111.section.md @@ -514,3 +514,5 @@ In addition to numerous new and upgraded packages, this release has the followin - The `services.unifi.dataDir` option is removed and the data is now always located under `/var/lib/unifi/data`. This is done to make better use of systemd state direcotiry and thus making the service restart more reliable. - The unifi logs can now be found under: `/var/log/unifi` instead of `/var/lib/unifi/logs`. - The unifi run directory can now be found under: `/run/unifi` instead of `/var/lib/unifi/run`. + +- `security.pam.services.<name>.makeHomeDir` now uses `umask=0077` instead of `umask=0022` when creating the home directory. |