Setting default permissions

When a file is created its default permissions are set. These default settings may be changed by placing an appropriate umask command in the system profile (/etc/profile).

umask settings for different security levels

Level of security	umask	Disallows
Permissive	0002	w for others
Moderate	0027	w for group, rwx for others
Severe	0077	rwx for group and others