[DDS-1993] Updated keys dir default file perms.

dpc-sdp · Aug 13, 2024 · 72a1ae0 · 72a1ae0
1 parent f4f941f
commit 72a1ae0
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/images/node/entrypoints/100-kms-decrypt.sh b/images/node/entrypoints/100-kms-decrypt.sh
@@ -19,6 +19,11 @@ warning() { echoerr "[WARNING] $*" ; }
 error()   { echoerr "[ERROR]   $*" ; }
 fatal()   { echoerr "[FATAL]   $*" ; exit 1 ; }
 
+info "set umask to least permissive for SSH keys by default"
+if [ -d "/app/keys" ]; then
+    umask 0177
+fi
+
 info "decrypting files"
 
 encrypted_files=""