summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenis Chevalier <perso@denischevalier.fr>2026-08-06 10:13:45 +0200
committerDenis Chevalier <perso@denischevalier.fr>2026-08-06 10:13:45 +0200
commit0d13f4b8fbf996b695cbbbc7cba66d32714d2a6c (patch)
tree957cc718297a2bbdd13b999286dbad8f78153ba5
parent3df9f043dea5fdc9caf39243c8790426f7602fc7 (diff)
downloadpostinstall-0d13f4b8fbf996b695cbbbc7cba66d32714d2a6c.tar.gz
postinstall-0d13f4b8fbf996b695cbbbc7cba66d32714d2a6c.tar.bz2
postinstall-0d13f4b8fbf996b695cbbbc7cba66d32714d2a6c.zip
add umask 0077
-rwxr-xr-xetc.bash1
-rw-r--r--etc/pam.d/login8
2 files changed, 9 insertions, 0 deletions
diff --git a/etc.bash b/etc.bash
index ef2f3b6..52a59b3 100755
--- a/etc.bash
+++ b/etc.bash
@@ -3,6 +3,7 @@
sudo cp -rv etc/keyd/* /etc/keyd/
sudo cp -v etc/pacman.conf /etc/
sudo cp -v etc/pam.d/system-local-login /etc/pam.d
+sudo cp -v etc/pam.d/login /etc/pam.d
sudo cp -v etc/updatedb.conf /etc/
sudo cp -v etc/sysctl.d/99-security.conf /etc/sysctl.d
sudo sysctl --system
diff --git a/etc/pam.d/login b/etc/pam.d/login
new file mode 100644
index 0000000..59a4be3
--- /dev/null
+++ b/etc/pam.d/login
@@ -0,0 +1,8 @@
+#%PAM-1.0
+
+auth requisite pam_nologin.so
+auth include system-local-login
+account include system-local-login
+session include system-local-login
+session optional pam_umask.so umask=0077
+password include system-local-login