/usr/share/initramfs-tools/conf-hooks.d/mandos is in mandos-client 1.7.1-2build1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 | # -*- shell-script -*-
# if mkinitramfs is started by mkinitramfs-kpkg, mkinitramfs-kpkg has
# already touched the initrd file with umask 022 before we had a
# chance to affect it. We cannot allow a readable initrd file,
# therefore we must fix this now.
if [ -e "${outfile}" ] \
&& [ `stat --format=%s "${outfile}"` -eq 0 ]; then
rm "${outfile}"
(umask 027; touch "${outfile}")
fi
UMASK=027
|