#!/bin/bash
# Copyright 2021 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

## Section: 5.4.4 Ensure default user umask is 027 or more restrictive ##
sed -i 's/^umask .*$/umask 027/' /etc/profile
echo "umask 027" >> /etc/profile.d/*
echo "umask 027" >> /etc/bash/bashrc