Is there any security concerns if the umask is set to 027 for root (Basically I want to know if 027 is better in security than 022 ) ?
As per my understanding 027 is a better one from security perspective . But I want to confirm this point .
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
027 is better from security perspective.
Even better is to use 077 for root.
With 027 mask, when root creates a file, it can be read and executed by users who belongs to the group of the file.
With 077 mask, only root can read write and execute files.
Why is 077 better?