diff --git a/trunk/shadow-4.11.1-login.defs.patch b/trunk/shadow-4.11.1-login.defs.patch
index bce8a11..8e20e15 100644
--- a/trunk/shadow-4.11.1-login.defs.patch
+++ b/trunk/shadow-4.11.1-login.defs.patch
@@ -1,5 +1,5 @@
 diff --git i/etc/login.defs w/etc/login.defs
-index 114dbcd9..4cb8cdf5 100644
+index 114dbcd9..98f3b3a2 100644
 --- i/etc/login.defs
 +++ w/etc/login.defs
 @@ -3,6 +3,8 @@
@@ -172,15 +172,15 @@ index 114dbcd9..4cb8cdf5 100644
  
  # Default initial "umask" value used by login(1) on non-PAM enabled systems.
  # Default "umask" value for pam_umask(8) on PAM enabled systems.
-@@ -199,7 +199,7 @@ KILLCHAR	025
- # 022 is the default value, but 027, or even 077, could be considered
- # for increased privacy. There is no One True Answer here: each sysadmin
- # must make up their mind.
--UMASK		022
-+UMASK		077
- 
+@@ -204,7 +204,7 @@ UMASK		022
  # HOME_MODE is used by useradd(8) and newusers(8) to set the mode for new
  # home directories.
+ # If HOME_MODE is not set, the value of UMASK is used to create the mode.
+-#HOME_MODE	0700
++HOME_MODE	0700
+ 
+ #
+ # Password aging controls:
 @@ -216,7 +216,7 @@ UMASK		022
  #
  PASS_MAX_DAYS	99999