Ensure root user umask is configured

# Check root's effective umask from profile files
umask_val=$(grep -E '^\s*umask\s+[0-7]+' /root/.bashrc /root/.bash_profile /etc/profile /etc/bashrc 2>/dev/null | tail -1 | grep -oE '[0-7]+$')
if [ -z "$umask_val" ]; then
  echo "FAIL: No umask configured for root"
  exit 1
fi
# Pad to 3 digits if needed
while [ ${#umask_val} -lt 3 ]; do umask_val="0${umask_val}"; done
# Per-digit comparison: each digit must be >= the corresponding digit in 027
u_digit=$(echo "$umask_val" | cut -c1)
g_digit=$(echo "$umask_val" | cut -c2)
o_digit=$(echo "$umask_val" | cut -c3)
if [ "$u_digit" -lt 0 ] || [ "$g_digit" -lt 2 ] || [ "$o_digit" -lt 7 ]; then
  echo "FAIL: Root umask ($umask_val) is less restrictive than 027"
  exit 1
fi
echo "OK: Root umask is $umask_val"
exit 0

expected_exit:

0

path:

/root/.bashrc

key:

umask

value:

027

separator: