Enable umask hardening

This commit is contained in:
Aaron Rainbolt 2024-11-28 15:20:57 -06:00
parent 59299a6639
commit 1708a03e1e
No known key found for this signature in database
GPG key ID: A709160D73C79109
3 changed files with 22 additions and 5 deletions

View file

@ -3,3 +3,8 @@
user ALL=NOPASSWD: /usr/libexec/security-misc/panic-on-oops
%sudo ALL=NOPASSWD: /usr/libexec/security-misc/panic-on-oops
## Use a more open umask when executing commands with sudo
## Can be overridden on a per-user basis using .[z]profile if desirable
Defaults umask_override
Defaults umask=0022