I tested now that UMASK in /etc/login.defs controls home directory creation umask (but unfortunately possible other umasks too).
Maybe there should be an own UMASK value used only for home directory creation, which should have a more secure default (077) especially for the first created user.
I tested now that UMASK in /etc/login.defs controls home directory creation umask (but unfortunately possible other umasks too).
Maybe there should be an own UMASK value used only for home directory creation, which should have a more secure default (077) especially for the first created user.