On: The Reluctant Sysadmin's Guide to Securing a Linux...

[lazyant]

> We want a umask of 077,

No we don't. This creates problems with many packages. There's a reason for defaults and a reason not to follow cargo-culting security "recipes".