World writable system files

[Dorothy Lim_1]

Does anyone out there know where I can find the best practice for the above
information ?

I have some auditors questioning on the file permission mode of the system
files.

I would like to be able to do some comparison & then implement the system files
to disallow writable.

Thks

[Randy Mather]

set the umask to 022 in /etc/profile or the user/.profile

this will create files to 644 permission

look at different umask settings until you come up with
what you want.

[Dorothy Lim_1]

Pls help to explain.

I have included umask 027 in the /etc/profile.
When I login as a normal user & create a file,
it shows me:-

rw-r----- testfile

When I changed the umask to 022 in the /etc/profile,
it shows me:-

rw-r--r-- testfile

Why is this it cause ?
I thought a umask setting of 027 means that the permission bit should be
rwxr-x--- & the setting of 022 means rwxr-xr-x.

thks

[Dorothy Lim_1]

Pls help to explain.

I have included umask 027 in the /etc/profile.
When I login as a normal user & create a file,
it shows me:-

rw-r----- testfile

When I changed the umask to 022 in the /etc/profile,
it shows me:-

rw-r--r-- testfile

Why is this it cause ?
I thought a umask setting of 027 means that the permission bit should be
rwxr-x--- & the setting of 022 means rwxr-xr-x.

thks