I've been trying to tweak some file permissions on the distribution of Wildfly (zipfile and folder), to reduce their accessibility:

A) directories readable for others:
files affected: bin, domain, migration,standalone, bin/client, docs/examples, docs/licenses
Current file Permissions: rwxr-xr-x
Target: rwxr-x--x

B) no 'x' privileges for members of the others group
files affected: domain/tmp, standalone/tmp"
Current file Permissions: rwxrwx---
Target: rwxrwx--x

C) unneeded 'x' privileges on libwfssl.so
modules/system/layers/base/org/wildfly/openssl/main/lib/linux-i386/libwfssl.so
Current file Permissions: rwxrwxr-x
Target: rw-rw-r--

I have failed to implement those changes because updating to the feature-pack.xml does not changes the permissions as expected. Indeed instead of ending up with a 755 mask the files ends up with a 775 mask. At first, it was a minor bug in the Wildfly Maven Build plugin, but debugging through it, I found out the related code is not even invoked for those particular files.

I also double check that the issue was not in the Galleon Plugin, as it seems some posix file changes also happens there.

At last, I've try to modify the numerous 'assembly.xml' living inside the project, but without any success. Does anyone know where and how I should implement those minor changes?