setting gets ignored (#680)

see: authselect/authselect#223 Signed-off-by: Sebastian Gumprich <[email protected]>
dev-sec · May 26, 2023 · 7e6a715 · 7e6a715
1 parent 9c86dae
commit 7e6a715
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/roles/os_hardening/templates/etc/pam.d/rhel_auth.j2 b/roles/os_hardening/templates/etc/pam.d/rhel_auth.j2
@@ -48,7 +48,7 @@ session     optional      pam_keyinit.so revoke
 session     required      pam_limits.so
 -session    optional      pam_systemd.so
 {% if (os_auth_pam_oddjob_mkhomedir | bool) %}
-session     optional      pam_oddjob_mkhomedir.so umask=0077
+session     optional      pam_oddjob_mkhomedir.so
 {% endif %}
 session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
 session     required      pam_unix.so