openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38642.rst
Major Hayden c357c26976 V-3864{2,5,7,9}, V-38651: Umask adjustments 
Change-Id: I032b0b1a140dd580c5b30a939692510eb06e9c65
2015-10-27 09:09:23 -05:00

429 B
Raw Blame History

The STIG requires that daemons have their umask set to 027 or 022. Since changing umasks can disrupt some systems, this is an opt-in change.

Deployers that want this change applied to their systems must set the Ansible variable umask_daemons_init to 027. The current default for Ubuntu 14.04 is 027 already, so deployers do not need to make any adjustments to Ansible variables to meet the STIG requirement.