[Pkg-shadow-devel] Bug#269583: Which setting really affects the default umask?

[Christian Perrier]

In #269583, the bug submitter says:

====================================================
The default UMASK value 022 is insecure for default Debian installation.
I suggest using more strict 027 in /etc/login.defs
====================================================

Indeed, even when I change this setting in /etc/login.defs, I still
get a OO22 umask.

Is the setting in /etc/login.defs still used or do I again miss some
PAM magic here?

--