Make overlay permission script global

This will make sure /root has proper permissions on our machines.

global/pre-tasks.d/015set-overlay-permissions

@@ -0,0 +1,19 @@
+#!/bin/sh
+#
+# Set overlay file permissions in model directory before apply.d/60overlay
+# rsyncs it to /
+#
+
+set -e
+self=$(basename "$0")
+
+MODEL_OVERLAY="$COSMOS_MODEL/overlay"
+
+if ! test -d "$MODEL_OVERLAY"; then
+    test -z "$COSMOS_VERBOSE" || echo "$self: overlay is a no-op"
+    exit 0
+fi
+
+if [ -d "$MODEL_OVERLAY/root" ]; then
+    chmod -v 0700 "$MODEL_OVERLAY"/root
+fi