#!/bin/bash | |
# Copyright 2021 The Chromium OS Authors. All rights reserved. | |
# Use of this source code is governed by a BSD-style license that can be | |
# found in the LICENSE file. | |
## Section: 5.4.4 Ensure default user umask is 027 or more restrictive ## | |
sed -i 's/^umask .*$/umask 027/' /etc/profile | |
echo "umask 027" >> /etc/profile.d/* | |
echo "umask 027" >> /etc/bash/bashrc |