Bug#1111714: release-notes: Trixie enables pam_umask usergroups, which changes umask from 0022 to 0002

pfoo <[email protected]> Mon, 29 Dec 2025 21:12:33 +0100
Newsgroups gmane.linux.debian.devel.documentation
Organization UNSC
Message-ID <ba81992b636cfc00e9aaa89a3bc4ae85__11304.5765830734$1767039808$gmane$org@unscdf.org>
Hi,

Found this by chance after about twenty Trixie upgrades.

This umask change is mentioned in the current wiki 
(https://wiki.debian.org/UserPrivateGroups and 
https://wiki.debian.org/Permissions#System-wide_umask_configuration) but 
not in Trixie release notes. This is a breaking change in term of 
default permission and security and should be advertised in the release 
note, maybe even into the "Issues to be aware of for trixie" section of 
the release notes as it changes a default behaviour without any user 
interaction.

Regards,