---
id: V-38651
status: opt-in
tag: file_perms
---

Changing the umask for the bash shell is an opt-in setting. Deployers that
want to set the umask for bash sessions to match the STIG requirement must
set the Ansible variable ``security_umask_bash`` to ``077``.