openstack-ansible-security/doc/metadata/rhel6/V-38649.rst

---id: V-38649 status: opt-in tag: file_perms ---

Since umask changes can be disruptive on some systems, the deployer must opt-in for this change to happen. If the security_umask_csh Ansible variable is set and the csh package is installed, the Ansible tasks will ensure the appropriate umask is set in the csh configuration file.

If users have an active csh shell session, they will need to logout and create a new session to pick up the new umask change.