Merge pull request delphix#471 from delphix/dlpx/pr/abhi2196/6159e258…

…-ce19-407b-9e66-78d204788306 DLPX-87205 CIS: default umask
grwilson · Feb 9, 2024 · 3c58815 · 3c58815
2 parents 132ae49 + 01257e6
commit 3c58815
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/files/common/etc/profile.d/set-umask-for-all-users.sh b/files/common/etc/profile.d/set-umask-for-all-users.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+umask 027
diff --git a/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml b/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml
@@ -679,4 +679,15 @@
     block: |
       . /etc/bash_completion.d/systemctl
       . /etc/bash_completion.d/zfs
-      PATH=$PATH:/opt/delphix/server/bin
+      PATH=$PATH:/opt/delphix/server/bin
+
+#
+# CIS: Set default umask (DLPX-87205)
+# We need to set default umask as 027 in the /etc/bash.bashrc file,
+# so that the same can be applied for all the users on the engine.
+#
+- blockinfile:
+    path: /etc/bash.bashrc
+    block: |
+      # Set default umask value.
+      umask 027