meta-security/meta-hardening/recipes-core/base-files/base-files_%.bbappend

do_install:append_harden () {
    sed -i 's/umask.*/umask 027/g' ${D}/${sysconfdir}/profile
}