A simple way to determine the value of user default permission when user creates files or dirs is simply to subtract the value of umask from the system default permission values:
$umask // will give you the permission.
Files: 666 dirs: 777
user: 002 userdirs: 002
to create files with the most practical restrictive permission use $umask 077
to set the umask value upon login add the following command to your profile script ~/,bash_profile in my system is the file ~/.bashrc and the command is
As an Administrator, you can add umask changes in the global file /etc/profile to have it apply to all users.
is to apply the most restrictive permission to files and then add permissions for specific users or groups as necessary. It is easy to add privileges, but it is difficult to take them away without getting into a tug of war.