DLPX-87205 CIS: default umask

PR URL: https://www.github.com/delphix/delphix-platform/pull/471

Author: Abhishek Shukla

files/common/etc/profile.d/set-umask-for-all-users.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+umask 027

files/common/var/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml

@@ -679,4 +679,15 @@
     block: |
       . /etc/bash_completion.d/systemctl
       . /etc/bash_completion.d/zfs
-      PATH=$PATH:/opt/delphix/server/bin
+      PATH=$PATH:/opt/delphix/server/bin
+
+#
+# CIS: Set default umask (DLPX-87205)
+# We need to set default umask as 027 in the /etc/bash.bashrc file,
+# so that the same can be applied for all the users on the engine.
+#
+- blockinfile:
+    path: /etc/bash.bashrc
+    block: |
+      # Set default umask value.
+      umask 027