So there is an issue with permissions after you have applied the CIS benchmarks (umask). Fixing them ourselves.