Handler for STIG-ID V-38647 needs to more-gracefully handle multiple umask-definition lines

[ferricoxide]

The /etc/profile shipped in the setup RPM has a starting umask definition-block that looks like:

if [ $UID -gt 199 ] && [ "`id -gn`" = "`id -un`" ]; then
    umask 002
else
    umask 022
fi

This handler doesn't deal with this structure very well. Currently, falls back and clobbers the above - replacing with "077". Might be better to either have the handler nuke this entire block or append a umask 077 to the file (not tidy but should override all prior umask defines).

[ferricoxide]

OBE: EL6 no longer supported by vendor