umask help

[George Goodman]

Hi all, I have now read a few books and am well on my way, thanks for
all the help before.

On my daily insecurity report I am getting:

Checking root sh paths, umask values:
/etc/profile /root/.profile
Root umask is group writable
Root umask is other writable

I have spent a lot of time trying to discover what is wrong.
prevoiusly I tried changing the umask from 022 to 0022 to see if that
would sort things out, but no.

Checking root sh paths, umask values:
/etc/profile /root/.profile
Root umask is group writable
Root umask is other writable

======
/root/.profile diffs (-OLD  +NEW)
======
--- /var/backups/root_.profile.current	Tue Aug 22 23:13:17 2006
+++ /root/.profile	Wed Aug 23 04:01:52 2006
@@ -6,4 +6,4 @@
 export EDITOR=nano

 PS1="\t: \u [\w]# "
-umask=022
+umask=0022

So as you can see, my umask is set to 0022 (was 022) which I thought
was correct. The reading I have done suggests that a umask of 022 sets
directory permissions of 755 and file permissions of 644.

>From what I understand 755 on a directory will give owner full access,
and others read and execute (browse) but no write. Likewise on files,
644 gives owner read and write, and others read only. Have I
misunderstood something?

Regards,

GG