Comment 3 for bug 253096

Revision history for this message
ceg (ceg) wrote : Re: pam_umask.so missing in common-session

Hello Steve,
thank you for improving ubuntu.

The example came from the pam_umask man page, maybe I had some typo.

There is some history why this bug should be fixed. It is a regression that is now easy to fix.
Before pam was introduced "login" provided the central point to set the UMASK value in login.defs and also containded the USERGROUPS_ENAB checking feature.

The switch to pam was made before pam supported this functionality. Since umask is an important parameter that people need to have set, they began to set umask in shell rc scripts, xsessions, ssh_config, some display mangers even hardcoded the umask etc. (And some of this had to be done to face the regression in day to day use.)

Finaly pam_umask.so reintroduced the functionality in pam and has now been merged from its own package (pam-umask) into the libpam-modules upstream. From the pam-umask package description: This package is useful to ensure that users' umasks are set consistently whether their session is initiated by login, SSH, a display manager for the X Window System, or some other means.