Re: [Security-Discuss] umask, Config Tools & User Private Groups

* Joe Baker <[email protected]> [2006-04-26 11:54:47 -0500]:

> I've seen the need to implement User Private Groups on our company's 
> Mandriva system.  As such I've been trying to set the default umask to 
> 007 for both root and users.
> 
> I've noticed that this really messes with rpm installations of software 
> and the menuing system.
> 
> I'd suggest that the drake configuration tools should store the initial 
> umask, then set it to something sane, perform their task and restore the 
> default umask.
> 
> I couldn't deploy updates to system menus.
> 
> My biggest concern is that Mandriva doesn't come with User Private 
> groups by default.
> 
> We run a very diverse system here where shared folders may be accessed 
> via NFS, Samba or via multiple users running remote XDMCP sessions via 
> VNCServer or LTSP.  Hence the need to have a umask which allows group 
> writable permissions and the need to set the group suid bit in the 
> shared folders.
> 
> I apologize that this isn't the best place for this message. 
> Suggestions where to take these concerns would be appreciated.

Hi, Joe.  Your best might be to file a bug on bugzilla or take this up
on the cooker mailing list to be looked at for the next version.  It's
doubtful that this will be corrected (or, rather, enhanced) in older
versions.  I could be wrong, of course, but I suspect most of the
developers of the particular tools would look at this for future
versions, not existing ones.

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}
Wasting time like it was free...

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFET6hyLrxeMv7jCtQRAtMIAJ0WvmfliENXl4t0zDbeY9WkKLhbZwCeKABV
PNCPOJuZ1mVmya/vtfqhXH4=
=HhRU
-----END PGP SIGNATURE-----