diff --git a/include/tests_authentication b/include/tests_authentication
index ad24a432..e230e9b2 100644
--- a/include/tests_authentication
+++ b/include/tests_authentication
@@ -822,8 +822,10 @@
                 if [ ! "${FIND}" = "077" -a ! "${FIND}" = "027" ]; then
                     logtext "Result: found umask ${FIND}, which could be more strict"
                     WEAK_UMASK=1
+                    AddHP 1 2
                   else
                     logtext "Result: found umask ${FIND}, which is fine"
+                    AddHP 2 2
                 fi
               # Found more than 1 umask value in profile
               else
@@ -833,11 +835,12 @@
                     if [ ! "${I}" = "077" -a ! "${I}" = "027" ]; then
                         logtext "Result: umask ${I} could be more strict"
                         WEAK_UMASK=1
+                        AddHP 1 2
                       else
                         logtext "Result: Found umask ${I}, which is fine"
+                        AddHP 2 2
                     fi
                 done
-                AddHP 1 2
             fi
 
             if [ ${FOUND_UMASK} -eq 1 ]; then