From 9eef0c7739b00ad5018ef37f453f2395f6923f8f Mon Sep 17 00:00:00 2001
From: Thomas Basler <thomas@familie-basler.net>
Date: Sat, 8 Jan 2022 03:52:25 +0100
Subject: [PATCH] xrdp_apphost: Secure home directories

Remove all permissions for other users from home directries
---
 roles/xrdp_apphost/tasks/main.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/roles/xrdp_apphost/tasks/main.yml b/roles/xrdp_apphost/tasks/main.yml
index e88d118..5d0231e 100644
--- a/roles/xrdp_apphost/tasks/main.yml
+++ b/roles/xrdp_apphost/tasks/main.yml
@@ -1,5 +1,13 @@
 ---
 
+- name: Set Default umask for Users
+  lineinfile:
+    dest: '/etc/login.defs'
+    regexp: "UMASK"
+    line: "UMASK 027"
+    state: present
+
+
 - include: xrdp.yml
 - include: lightburn.yml
 - include: estlcam.yml