From 113b32018fe5966aa3183e771ee9f998dc2d16b8 Mon Sep 17 00:00:00 2001
From: Mark Bolwell <mark.bollyuk@gmail.com>
Date: Fri, 10 Jan 2025 12:38:24 +0000
Subject: [PATCH] profile script

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
---
 templates/etc/profile.d/50-umask.sh.j2 | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 templates/etc/profile.d/50-umask.sh.j2

diff --git a/templates/etc/profile.d/50-umask.sh.j2 b/templates/etc/profile.d/50-umask.sh.j2
new file mode 100644
index 0000000..e300e9c
--- /dev/null
+++ b/templates/etc/profile.d/50-umask.sh.j2
@@ -0,0 +1,7 @@
+## Ansible controlled file
+# Added as part of ansible-lockdown CIS baseline
+# provided by Mindpoint Group - A Tyto Athene Company / Ansible Lockdown
+
+# Set umask with highest precedence
+
+umask 027