file-permissions

  {
    "variables": {
      "file_permissions:file_permissions.files": {
        "value": [
          {
            "path": "/etc/hosts",
            "mode": "644",
            "why": "Any user should be able to resolve names from /etc/hosts"
          }
        ],
        "comment": "Files and their required permissions"
      }
    }
  }