Bug#23029: zsh: /etc/zprofile overides my defaults set in ~/.zshenv

[b...@snoopy.apana.org.au]

Package: zsh
Version: 3.1.2-7

In my .zshenv file, I have:
umask 077
ulimit -c 0

I put these in my .zshenv file, because then the change takes affect
on all invocations of the shell. If I put it in .zprofile or .zshrc
or .zlogin, I would need to duplicate the settings in many files. It
works for non-debian systems and previous versions of zsh. However,
in the latest version(?), these changes are overriden by the contents
of /etc/zprofile:

unlimit coredumpsize
umask 002

Also: I do not understand why ANYONE would want a umask of 002,
allowing group write. IMHO, this is a security risk, as there is no
warning upon installing the new version of zsh that all new files will
become writable be group (which often means everybody on the system).

unlimit coredumpsize is normally the default (I think), making the top
entry (IHMO) redundant. As explained above, I don't see any point in
the 2nd line. Please correct me if I am wrong.

IMHO, If there is in fact I need for these lines, then I think they
should go in /etc/zshenv which effects all shells, not /etc/zprofile.

-- System Information
Debian Release: 2.0 (frozen)
Kernel Version: Linux snoopy 2.1.96 #1 Wed Apr 15 23:53:23 EST 1998 i486 unknown

Versions of the packages zsh depends on:
ii libc6 2.0.7pre3-1 The GNU C library version 2 (run-time files)
ii ncurses3.4 1.9.9g-8 Video terminal manipulation - shared librari

--- Begin /etc/zshenv (modified conffile)
if [[ -z "$PATH" ]]
then
export PATH="/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games"
fi
MAIL="$HOME/Mailbox"
MAILDIR="$HOME/Maildir"
MAILTMP="$HOME/Maildir.tmp"
export MAILDIR MAILTMP

--- End /etc/zshenv

--
To UNSUBSCRIBE, email to debian-bugs-...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

[Clint Adams]

> Also: I do not understand why ANYONE would want a umask of 002,
> allowing group write. IMHO, this is a security risk, as there is no
> warning upon installing the new version of zsh that all new files will
> become writable be group (which often means everybody on the system).

The Debian standard is to have a group for each user. The 002 umask
reflects this. You will notice it in bash's /etc/profile, and
the DontBlameSendmail options in the sendmail 8.9.0 package.

It was moved to /etc/zprofile because some users didn't want it
overridden on each invocation. Arguably, it is more useful in
/etc/zshenv.

> unlimit coredumpsize is normally the default (I think), making the top
> entry (IHMO) redundant. As explained above, I don't see any point in
> the 2nd line. Please correct me if I am wrong.

You are not wrong. This is a legacy from the previous maintainer,
and it will be removed.