How to change the umask for daemons in Red Hat Enterprise Linux
Issue
-
A security audit says that, the log files created by the daemons are world readable. This needs to be changed as world non-readable or in other words from permission 644 to permission 640.
-
How to change the umask for daemons. This is not about system umask which can be changed from
/etc/profileor/etc/.bashrc. We are talking about the umask value inherited by the daemons like httpd, postfix etc.
Environment
- Red Hat Enterprise Linux 5 and 6 (RHEL)
- initscripts rpm package
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
