What with usergroups being the default behavior, do you think it's quite reasonable to use 002 as a default umask? Most group-sharing use-cases I've encountered have people that are sharing groups share files as read-write anyways, and by default, users have their own private group which nobody else is a member of; i.e. g+rw still won't allow others to write them.
That was the idea, RH did it that way a dozen years ago for exactly the reason you mention: dir mods of 02770 make it easy to share files but require 002 umask. Fix was to set the per-user group, allowing private dir's (largely $HOME) to have tighter mods with files below them "group readable" by a single-user group. The scheme works rather nicely in nearly every situation (POSIX ACL's play hell with the scheme, but, then, they are supposed to). enjoi -- Steven Lembark 85-09 90th St. Workhorse Computing Woodhaven, NY, 11421 lemb...@wrkhors.com +1 888 359 3508