[ILUG] umask query

[Kevin Philp]

A query about umask. On our network users are all part of the same 
primary group and they share files as part of that group. When we set 
the network up all the Ubuntu clients have a default umask of 022 in 
/etc/profile - which is a pain and 007 would better suit our needs - 
everyone in the primary group shares the files created and everyone 
outside the group has no access at all.

To change the default umask I seem to have lots of options:

/etc/profile
/etc/login.defs
~/.profile

and adding
session optional pam_umask.so umask=007  |to /etc/pam.d/common-session|

The last option seems to be the best for a networked system where people 
login via nis and should save me having to edit every computer. My only 
concern is:

What order does someones GUI login actually read the umask settings and 
will a local setting overwrite the pam.d setting?