# Lynis – Default umask in /etc/* could be more strict like 027 [test:AUTH-9328]

Posted by ZedTuX 0n R00t on January 12, 2014

If Lynis list the following suggestion:

Default umask in /etc/profile could be more strict like 027 [test:AUTH-9328]

You will fix it by editing the file /etc/login.defs and changing the following line from 022 to 027:

1