Just to be clear I am not recommending changing roots umask on a hardened system. Also, I think /etc/profile.d/Canonical_Ubuntu_CIS_rule-5.4.4.sh may need to be changed as well/instead of /etc/login.defs
Just to be clear I am not recommending changing roots umask on a hardened system. Also, I think /etc/profile. d/Canonical_ Ubuntu_ CIS_rule- 5.4.4.sh may need to be changed as well/instead of /etc/login.defs