Change default umask to 0026

Change-Id: I259c36c3a7b4051d37df862b61cc9427e7697fd6

diff --git a/packaging/security-manager-iptables-load.service b/packaging/security-manager-iptables-load.service
index 7115a8ea41bbfdaf0e8d56f532ed765c2f867d94..32ab64e2495b0ba7b037cbd109309dde0bb4206e 100644 (file)
--- a/packaging/security-manager-iptables-load.service
+++ b/packaging/security-manager-iptables-load.service
@@ -6,6 +6,7 @@ Wants=network-pre.target
 
 [Service]
 Type=oneshot
+UMask=0026
 ExecStart=/sbin/iptables-restore -w -- /etc/security-manager-iptables.rules
 ExecStart=/sbin/ip6tables-restore -w -- /etc/security-manager-ip6tables.rules
 

diff --git a/systemd/license-manager-agent.service.in b/systemd/license-manager-agent.service.in
index 9005b451ba66c71893ae142a1d1fd817974143fb..2ff76167ee6a68a28af4233aad8d89c6d6036d56 100644 (file)
--- a/systemd/license-manager-agent.service.in
+++ b/systemd/license-manager-agent.service.in
@@ -8,6 +8,7 @@ Group=security_fw
 CapabilityBoundingSet=
 ExecStart=@BIN_INSTALL_DIR@/license-manager-agent
 SmackProcessLabel=System
+UMask=0026
 
 [Install]
 WantedBy=cynara.service

diff --git a/systemd/security-manager-cleanup.service.in b/systemd/security-manager-cleanup.service.in
index a82263d094472310abb83330cc6d0030ee274c1a..31db4a44bdeb35dd1fef740c284ff1b6acbcbc36 100644 (file)
--- a/systemd/security-manager-cleanup.service.in
+++ b/systemd/security-manager-cleanup.service.in
@@ -9,4 +9,5 @@ Type=oneshot
 RemainAfterExit=yes
 ExecStart = @BIN_INSTALL_DIR@/security-manager-cleanup
 SmackProcessLabel=System::Privileged
+UMask=0026
 

diff --git a/systemd/security-manager-valgrind.service.in b/systemd/security-manager-valgrind.service.in
index 732d3df0aea8f1f221471470d88f5e36a6c67fc4..7e3c04eb599c34df796ad39b5150784aaff374b8 100644 (file)
--- a/systemd/security-manager-valgrind.service.in
+++ b/systemd/security-manager-valgrind.service.in
@@ -10,3 +10,4 @@ ExecStart=@BIN_INSTALL_DIR@/valgrind -v --tool=memcheck --log-file=/tmp/security
 Sockets=security-manager.socket
 Restart=always
 SmackProcessLabel=System::Privileged
+UMask=0026

diff --git a/systemd/security-manager.service.in b/systemd/security-manager.service.in
index b6c2fb9321c57771bc735379af7d084af7f662b3..836f6dbf2c9dcc2da8a19f308857968a44ba773a 100644 (file)
--- a/systemd/security-manager.service.in
+++ b/systemd/security-manager.service.in
@@ -7,3 +7,4 @@ Type=notify
 ExecStart=@BIN_INSTALL_DIR@/security-manager
 Restart=always
 SmackProcessLabel=System::Privileged
+UMask=0026