| #!/bin/bash | |
| # Copyright 2021 The Chromium OS Authors. All rights reserved. | |
| # Use of this source code is governed by a BSD-style license that can be | |
| # found in the LICENSE file. | |
| ## Section: 5.4.4 Ensure default user umask is 027 or more restrictive ## | |
| sed -i 's/^umask .*$/umask 027/' /etc/profile | |
| echo "umask 027" >> /etc/profile.d/* | |
| echo "umask 027" >> /etc/bash/bashrc |