QubesOS/qubes-linux-template-builder
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Set defualt umask

Browse Source
This commit is contained in:
Jason Mehring 2014-10-26 14:59:38 -04:00
parent 99ef1072fa
commit dd49aff3e3
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
scripts_debian/02_install_groups.sh
View File

@ -58,6 +58,11 @@ return 101 # Action forbidden by policy
EOF EOF
chmod 755 "$INSTALLDIR/usr/sbin/policy-rc.d" chmod 755 "$INSTALLDIR/usr/sbin/policy-rc.d"
# ------------------------------------------------------------------------------
# Ensure umask set in /etc/login.defs is used (022)
# ------------------------------------------------------------------------------
echo "session optional pam_umask.so" >> "${INSTALLDIR}/etc/pam.d/common-session"
# ------------------------------------------------------------------------------ # ------------------------------------------------------------------------------
# Add debian security repository # Add debian security repository
# ------------------------------------------------------------------------------ # ------------------------------------------------------------------------------

3
scripts_debian/wheezy+whonix/02_install_groups_packages_installed.sh
View File

@ -103,9 +103,6 @@ sudo touch /root/.whonix/first_run_initializer.done
# Prevent whonixcheck error # Prevent whonixcheck error
sudo su -c 'echo WHONIXCHECK_NO_EXIT_ON_UNSUPPORTED_VIRTUALIZER=\"1\" >> /etc/whonix.d/30_whonixcheck_default' sudo su -c 'echo WHONIXCHECK_NO_EXIT_ON_UNSUPPORTED_VIRTUALIZER=\"1\" >> /etc/whonix.d/30_whonixcheck_default'
# Ensure umask set in /etc/login.defs is used (022)
sudo su -c 'echo "session optional pam_umask.so" >> /etc/pam.d/common-session'
sudo update-rc.d network-manager disable sudo update-rc.d network-manager disable
sudo update-rc.d spice-vdagent disable sudo update-rc.d spice-vdagent disable
sudo update-rc.d swap-file-creator disable sudo update-rc.d swap-file-creator disable