Provide means to set umask of user?

[keirlawson]

It would be great if there was some means of setting the umask of a user created by an RPM build via native-packager. Obviously this can be done with some other provisioning tool but this strikes me as a relatively common requirement that might be worth incorporating directly in native-packager?

[muuki88]

Take a look at the LinuxPackageMapping. There are already ways of setting POSIX permissions. Is there something missing? This should also be documented in the LinxuPlugin.

Maybe we need to make this more visible.

[keirlawson]

I'm wanting to set the default permissions of files created by my process rather than files installed by the package (for example, log files) - for this I need to set the user's umask I believe

[muuki88]

Aaaaah. 😃 Thanks for clarifying 😊

That sounds reasonable. What would an ideal API for that look like?

[keirlawson]

I guess a daemonUserMask property as part of the Java server application archetype?

[muuki88]

With type Option[String] an None as default I guess? Where would we put the umask command. This needs to be part of the bash script, right?

[keirlawson]

Ok digging into this a bit more, it seems atleast on our systems (CentOS with System V) the most "correct" place to stick the umask is in /etc/default/appname - so settings the umask can be done already using the etc-default-systemv template. Perhaps rather than adding a new option it might just be better to document this approach for others that might need it?

[muuki88]

That sounds even better! 😎
Less settings mean less maintenance.

[mkurz]

Added docs for a more general way how to set umask, not just when using System V/systemd: #1274