Use Case
We are in the process of hardening our Ubuntu servers using the Security Technical Implementation Guides (STIGs) for Ubuntu. The default hard-coded 0770 are too permissive and fail those validations/rules:
UBTU-18-010139
UBTU-20-010456
UBTU-22-232015
The validation for this check in case you cant access de URL is :
Verify the system commands contained in the following directories have mode 0755 or less permissive:
/bin
/sbin
/usr/bin
/usr/sbin
/usr/local/bin
/usr/local/sbin
I belive this is the code section that creates the file
Describe the Solution You Would Like
I would like to be able to set the permissions for the file, or at least for the default permissions to be changed to 755 or less permissive