topic Re: system wide umask in Operating System - HP-UX

system wide umask

jerry1 — Thu, 04 Nov 2004 13:18:44 GMT

I forgot how to set the system wide umask
from hp default of 00 to 022.

Re: system wide umask

Sundar_7 — Thu, 04 Nov 2004 13:27:07 GMT

Set the umask in /etc/profile.

Re: system wide umask

Sanjay_6 — Thu, 04 Nov 2004 13:31:09 GMT

Hi Jerry,

the global file should be /etc/profile.

The profile execution sequence is /etc/profile and then .profile(user's profile) (for ksh/bash/sh shell users)

You can define umask in /etc/profile, then that can be overridden in .profile.

You can put umask in .profile, but put the owner of .profile to root:root.

This way a user can not modify your seetings in .profile.

But note that a user familiar with umask can modify it at command prompt.

Hope this helps.

Regds

Re: system wide umask

Doug Burton — Thu, 04 Nov 2004 14:39:29 GMT

You can also try this in the /etc/profile. It locks down root a bit more than the users.

if [[ $(/usr/bin/id -u) -eq 0 ]]
then
umask 077
else
umask 022
fi

Re: system wide umask

jerry1 — Thu, 04 Nov 2004 16:36:16 GMT

That's why I forgot. It was to easy.

Thanks all.

Re: system wide umask

jerry1 — Mon, 08 Nov 2004 08:35:23 GMT

Well. We are all wrong.

I have no umask in /etc/profile or our system
wide custom /usr/local/etc/profile, etc...

I have commented out root's umask from .profile.
When I do a "remsh host1 umask" I get 022.

This is the only system that has the
umask set to 022 globally. All the others are 00.

I checked /sbin/rc and there is a umsak 022 on all the systems but they are still 00 globally. I also check /sbin/init.d/* and
they are all the same.
Where is 022 getting set on host1??

Re: system wide umask

AMAT SA — Fri, 19 Aug 2005 13:23:36 GMT

what is the equivalnt of Solaris's /etc/default/init in HPUX, where in I can set the system level umask.

Re: system wide umask

jerry1 — Fri, 19 Aug 2005 16:24:48 GMT

As I understand it now. There are several
ways to set the umask but to set it as
a global default on that server we set
it in the HP-UX default files /etc/profile for sh,ksh and /etc/csh.login for csh.

Re: system wide umask

jerry1 — Fri, 19 Aug 2005 16:32:24 GMT

Oh, I forgot. You can also change it
in /sbin/init.d/inetd. inetd will then
have umask set for the services it provides.

Re: system wide umask

Bill Hassell — Fri, 19 Aug 2005 17:13:26 GMT

umask has been missing from /etc/profile forever. There is no equivalent file so you must put umask into /etc/profile. It is simply flat out wrong not to set umask for all logins. Put umask 022 in /etc/profile and also /etc/csh.login (and all other non-standard shells you may be using). it is one of the first security 'fixes' you have to do with new (and old) systems.

Re: system wide umask

jerry1 — Mon, 22 Aug 2005 13:33:21 GMT

umask, umask, who's gotta my umask?

See yah.