Merge pull request #449 from delphix/dlpx/pr/abhi2196/ec491807-7a57-4…

…59e-af31-863ef36f1721 DLPX-86533 CIS: default umask
delphix · Jul 24, 2023 · 73297c9 · 73297c9
2 parents 5a98530 + 729786c
commit 73297c9
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/files/common/etc/profile.d/set-umask-for-all-users.sh b/files/common/etc/profile.d/set-umask-for-all-users.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+umask 027
diff --git a/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml b/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml
@@ -681,3 +681,14 @@
   when:
     - variant == "internal-buildserver"
     - not ansible_is_chroot
+
+#
+# CIS: Set default umask (DLPX-86533)
+# We need to set default umask as 027 in the /etc/bash.bashrc file,
+# so that the same can be applied for all the users on the engine.
+#
+- blockinfile:
+    path: /etc/bash.bashrc
+    block: |
+      # Set default umask value.
+      umask 027