openstack/ansible-hardening
Code Issues Proposed changes
24f3f73717
ansible-hardening/doc/source/developer-notes/V-38642.rst
Major Hayden e954ff5c64 Docs: Update dev notes for Cat 1 controls 
This patch updates the documentation for the developer notes associated
with the Cat 1 (Low) controls applied by the security role.

Partial-bug: 1583744

Change-Id: I19cab15d1bc7ce6e8604d63bf8184b9569207991
2016-05-24 16:22:12 +00:00

302 B
Raw Blame History

Opt-in required

The STIG requires that daemons have their umask set to 027 or 022. Since changing umasks can disrupt some systems, this is an opt-in change.

Deployers that want this change applied to their systems must set the Ansible variable security_umask_daemons_init to 027.