Package: bash Version: 1.14.4-2 bash has a very annoying habit of creating a world-readable .bash_history file, if you let it.
I have solved this problem by putting creating a mode 600 empty file /etc/skel/.bash_history, so that the file already has the right permissions when bash starts to use it. There are other obvious solutions to the problem - I don't know which is best, but something should be done. Ian.