feat(crypto): CRP-1974: Add umask for crypto-csp process

dfinity · Apr 4, 2023 · 6eb91f7 · 6eb91f7
1 parent 0d2d3fc
commit 6eb91f7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/ic-os/guestos/rootfs/etc/systemd/system/ic-crypto-csp.service b/ic-os/guestos/rootfs/etc/systemd/system/ic-crypto-csp.service
@@ -11,6 +11,7 @@ Requires=ic-crypto-csp.socket
 StartLimitIntervalSec=0
 
 [Service]
+UMask=066
 User=ic-csp-vault
 Environment=RUST_BACKTRACE=1
 # When starting ic-crypto-csp, ideally --replica-config-file would directly point to