DLPX-87205 CIS: default umask

PR URL: https://www.github.com/delphix/delphix-platform/pull/471
delphix · Jan 5, 2024 · ddaccd0 · ddaccd0
1 parent 3980f5f
commit ddaccd0
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/files/common/etc/profile.d/set-umask-for-all-users.sh b/files/common/etc/profile.d/set-umask-for-all-users.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+umask 027
diff --git a/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml b/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml
@@ -713,4 +713,15 @@
     block: |
       . /etc/bash_completion.d/systemctl
       . /etc/bash_completion.d/zfs
-      PATH=$PATH:/opt/delphix/server/bin
+      PATH=$PATH:/opt/delphix/server/bin
+
+#
+# CIS: Set default umask (DLPX-87205)
+# We need to set default umask as 027 in the /etc/bash.bashrc file,
+# so that the same can be applied for all the users on the engine.
+#
+- blockinfile:
+    path: /etc/bash.bashrc
+    block: |
+      # Set default umask value.
+      umask 027