From 518c671d2b5f4f9cf5d4bafe0bead9b5f9cb9f96 Mon Sep 17 00:00:00 2001
From: "info@pi-farm.de" <6+pi-farm@noreply.git.pi-farm.de>
Date: Sat, 10 Oct 2026 00:21:53 +0000
Subject: [PATCH] fix permissions for users-homeshares

---
 Dockerfile.aarch64 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile.aarch64 b/Dockerfile.aarch64
index 7cac8f2..de0f9b3 100644
--- a/Dockerfile.aarch64
+++ b/Dockerfile.aarch64
@@ -59,7 +59,7 @@ RUN sed -i 's/^Types: deb$/Types: deb deb-src/' /etc/apt/sources.list.d/debian.s
 
 RUN sed -i '/%users/s/^/# /' /etc/sudoers && \
     echo "sudoers: files sss" >> /etc/nsswitch.conf && \
-    echo "session required pam_mkhomedir.so skel=/etc/skel/ umask=0022" >> /etc/pam.d/common-session
+    echo "session required pam_mkhomedir.so skel=/etc/skel/ umask=0077" >> /etc/pam.d/common-session
 
 RUN chmod 440 /etc/sudoers && \
     mkdir -p /etc/sssd && chown root:root /etc/sssd && chmod 755 /etc/sssd && \