set umask in login.defs aswell

2022-09-18 22:05:16 +02:00 · 2022-09-18 22:05:16 +02:00 · 91d6625115
parent e6096b608c
commit 91d6625115
1 changed files with 8 additions and 0 deletions
--- a/tasks/bash.yml
+++ b/tasks/bash.yml
@ -27,6 +27,14 @@
        - /etc/csh.cshrc
        - /etc/profile

+    - name: Set umask in /etc/login.defs
+      lineinfile:
+        path: /etc/login.defs
+        regexp: '^(?P<umask>UMASK\s+).+'
+        line: \g<umask>{{ users_global_umask }}
+        backrefs: yes
+        state: present
+
    - name: Enforce minimum password lifetime
      lineinfile:
        path: /etc/login.defs