GNU bug report logs - #22650
umask is 0000 when logging in over SSH (with lshd running)

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 22650 in the body.
You can then email your comments to 22650 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: myglc2 <myglc2 <at> gmail.com>
To: bug-guix <at> gnu.org
Subject: guixSD default umask is 0000
Date: Sat, 13 Feb 2016 09:36:35 -0500

out of the box, umask should default to something more typical.

Message #8 received at 22650 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: myglc2 <myglc2 <at> gmail.com>
Cc: 22650 <at> debbugs.gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Mon, 22 Feb 2016 00:17:55 +0100

I can’t reproduce this.  For instance, in the system created with:

  guix system vm gnu/system/examples/bare-bones.tmpl

‘umask’ returns 0022.

Could it be that your user accounts have shell startup files like
~/.bashrc that specify a different umask?

Thanks,
Ludo’.

Message #11 received at 22650 <at> debbugs.gnu.org (full text, mbox):

From: myglc2 <myglc2 <at> gmail.com>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: 22650 <at> debbugs.gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Mon, 22 Feb 2016 11:24:52 -0500

[Message part 1 (text/plain, inline)]

ludo <at> gnu.org (Ludovic Courtès) writes:

> I can’t reproduce this.  For instance, in the system created with:
>
>   guix system vm gnu/system/examples/bare-bones.tmpl
>
> ‘umask’ returns 0022.
>
> Could it be that your user accounts have shell startup files like
> ~/.bashrc that specify a different umask?

I don't think so. I have attached a log of dot files for a sample user
(glc4) and the most current (feb 12) system config.

'system-generations-package-list' file was generated by 'emacs' 'M-x
guix-system-generations' '"select" (current) generation'

HTH, George

[umask.bug.log (application/octet-stream, attachment)]

[config.n.scm (application/octet-stream, attachment)]

Message #16 received at 22650 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: myglc2 <myglc2 <at> gmail.com>
Cc: 22650 <at> debbugs.gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Wed, 24 Feb 2016 16:41:55 +0100

myglc2 <myglc2 <at> gmail.com> skribis:

> glc <at> g1 ~$ ssh glc4 <at> g1
> glc4 <at> g1's password: 
> glc4 <at> g1 ~$ umask
> 0000

Oh indeed, I can reproduce it.

The problem is that lshd resets the umask when it starts (in
src/daemon.c:daemon_init) but never changes it again.

Perhaps we should be using pam_umask and login.defs (although I’m unsure
if lshd would honor it), or alternately add explicitly set the umask in
/etc/profile.

Thoughts?

Thanks,
Ludo’.

Message #19 received at submit <at> debbugs.gnu.org (full text, mbox):

From: myglc2 <myglc2 <at> gmail.com>
To: bug-guix <at> gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Mon, 29 Feb 2016 21:25:59 -0500

ludo <at> gnu.org (Ludovic Courtès) writes:

> myglc2 <myglc2 <at> gmail.com> skribis:
>
>> glc <at> g1 ~$ ssh glc4 <at> g1
>> glc4 <at> g1's password: 
>> glc4 <at> g1 ~$ umask
>> 0000
>
> Oh indeed, I can reproduce it.
>
> The problem is that lshd resets the umask when it starts (in
> src/daemon.c:daemon_init) but never changes it again.
>
> Perhaps we should be using pam_umask and login.defs (although I’m unsure
> if lshd would honor it), or alternately add explicitly set the umask in
> /etc/profile.
>
> Thoughts?

Thanks for looking into this. Sorry, but I'm not qualified to comment. 

Message #22 received at 22650 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: iyzsong <at> member.fsf.org (宋文武), Alex Kost
 <alezost <at> gmail.com>
Cc: , 宋文武 <iyzsong <at> gmail.com>, 22650 <at> debbugs.gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Mon, 07 Mar 2016 13:18:44 +0100

ludo <at> gnu.org (Ludovic Courtès) skribis:

> myglc2 <myglc2 <at> gmail.com> skribis:
>
>> glc <at> g1 ~$ ssh glc4 <at> g1
>> glc4 <at> g1's password: 
>> glc4 <at> g1 ~$ umask
>> 0000
>
> Oh indeed, I can reproduce it.
>
> The problem is that lshd resets the umask when it starts (in
> src/daemon.c:daemon_init) but never changes it again.
>
> Perhaps we should be using pam_umask and login.defs (although I’m unsure
> if lshd would honor it), or alternately add explicitly set the umask in
> /etc/profile.
>
> Thoughts?

宋文武 & Alex: WDYT?  (Asking you since I know you’re already familiar
with these things.  :-))

Ludo’.

Message #25 received at 22650 <at> debbugs.gnu.org (full text, mbox):

From: 宋文武 <iyzsong <at> openmailbox.org>
To: ludo <at> gnu.org,iyzsong <at> member.fsf.org,Alex Kost <alezost <at> gmail.com>
Cc: iyzsong <at> gmail.com, 22650 <at> debbugs.gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Mon, 07 Mar 2016 23:18:48 +0800

[Message part 1 (text/plain, inline)]

于 2016年3月7日 GMT+08:00下午8:18:44, ludo <at> gnu.org 写到:
>ludo <at> gnu.org (Ludovic Courtès) skribis:
>
>> myglc2 <myglc2 <at> gmail.com> skribis:
>>
>>> glc <at> g1 ~$ ssh glc4 <at> g1
>>> glc4 <at> g1's password: 
>>> glc4 <at> g1 ~$ umask
>>> 0000
>>
>> Oh indeed, I can reproduce it.
>>
>> The problem is that lshd resets the umask when it starts (in
>> src/daemon.c:daemon_init) but never changes it again.
>>
>> Perhaps we should be using pam_umask and login.defs (although I’m
>unsure
>> if lshd would honor it), or alternately add explicitly set the umask
>in
>> /etc/profile.
>>
>> Thoughts?
>
>宋文武 & Alex: WDYT?  (Asking you since I know you’re already familiar
>with these things.  :-))
>
>Ludo’.

I never pay attention to umask, but set it in /etc/profile seem the right thing to me. IIRC, debian and exherbo set it in there too.

[Message part 2 (text/html, inline)]

Message #28 received at 22650 <at> debbugs.gnu.org (full text, mbox):

From: Alex Kost <alezost <at> gmail.com>
To: 宋文武 <iyzsong <at> openmailbox.org>
Cc: iyzsong <at> gmail.com, ludo <at> gnu.org, iyzsong <at> member.fsf.org,
 22650 <at> debbugs.gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Tue, 08 Mar 2016 01:25:59 +0300

宋文武 (2016-03-07 18:18 +0300) wrote:

> 于 2016年3月7日 GMT+08:00下午8:18:44, ludo <at> gnu.org 写到:
>
>     ludo <at> gnu.org (Ludovic Courtès) skribis:
>
>          myglc2 <myglc2 <at> gmail.com> skribis:
>
>              glc <at> g1 ~$ ssh glc4 <at> g1
>              glc4 <at> g1's password:
>              glc4 <at> g1 ~$ umask
>              0000
>
>          Oh indeed, I can reproduce it.
>
>          The problem is that lshd resets the umask when it starts (in
>          src/daemon.c:daemon_init) but never changes it again.
>
>          Perhaps we should be using pam_umask and login.defs (although I’m unsure
>          if lshd would honor it), or alternately add explicitly set the umask in
>          /etc/profile.
>
>          Thoughts?
>
>     宋文武 & Alex: WDYT?  (Asking you since I know you’re already familiar
>     with these things.  :-))
>
>     Ludo’.
>
>
> I never pay attention to umask, but set it in /etc/profile seem the
> right thing to me. IIRC, debian and exherbo set it in there too.

I agree ("ArchLinux" also has "umask 022" in /etc/profile).

--
Alex

Message #33 received at 22650-done <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Alex Kost <alezost <at> gmail.com>
Cc: 宋文武 <iyzsong <at> openmailbox.org>, iyzsong <at> gmail.com,
 iyzsong <at> member.fsf.org, 22650-done <at> debbugs.gnu.org
Subject: Re: bug#22650: guixSD default umask is 0000
Date: Tue, 08 Mar 2016 23:33:49 +0100

Alex Kost <alezost <at> gmail.com> skribis:

> 宋文武 (2016-03-07 18:18 +0300) wrote:
>
>> 于 2016年3月7日 GMT+08:00下午8:18:44, ludo <at> gnu.org 写到:
>>
>>     ludo <at> gnu.org (Ludovic Courtès) skribis:
>>
>>          myglc2 <myglc2 <at> gmail.com> skribis:
>>
>>              glc <at> g1 ~$ ssh glc4 <at> g1
>>              glc4 <at> g1's password:
>>              glc4 <at> g1 ~$ umask
>>              0000
>>
>>          Oh indeed, I can reproduce it.
>>
>>          The problem is that lshd resets the umask when it starts (in
>>          src/daemon.c:daemon_init) but never changes it again.
>>
>>          Perhaps we should be using pam_umask and login.defs (although I’m unsure
>>          if lshd would honor it), or alternately add explicitly set the umask in
>>          /etc/profile.
>>
>>          Thoughts?
>>
>>     宋文武 & Alex: WDYT?  (Asking you since I know you’re already familiar
>>     with these things.  :-))
>>
>>     Ludo’.
>>
>>
>> I never pay attention to umask, but set it in /etc/profile seem the
>> right thing to me. IIRC, debian and exherbo set it in there too.
>
> I agree ("ArchLinux" also has "umask 022" in /etc/profile).

Done in 112024826d3283284654475a50ccef81c697e2c9.

Thanks for your feedback,
Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.