The umask controls the default file creation permissions, 0002 means files will have 664 and directories 775. Setting this (by editing the umask line at the bottom of /etc/profile in my case) means files created by one user will be writable by other users in the www-group without needing to chmod them.

I've looked that up, but I am told:

# The default umask is now handled by pam_umask.  
# See pam_umask(8) and /etc/login.defs.

And here I am blocked as I don't know pam_umask, I want to change the umask to 0002. How to?

2 Answers 2


From man 8 pam_umask:

Add the following line to /etc/pam.d/login to set the user specific umask at login:

               session optional pam_umask.so umask=0022

You can change that value to 0002.


The right place under debian is:


session optional pam_umask.so umask = #VALUE (e.g. 0026)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.