From 8478dae30b2b8789eddc534cf8e0c20a4d6c09f3 Mon Sep 17 00:00:00 2001
From: Jan Macku <jamacku@redhat.com>
Date: Wed, 28 Jun 2023 12:51:08 +0200
Subject: [PATCH] pam: add call to pam_umask

Setting umask for user sessions via UMASK setting in /etc/login.defs is
a well-known feature. Let's make sure that user manager also runs with
this umask value.

rhel-only

Resolves: #2210145
---
 systemd-user | 1 +
 1 file changed, 1 insertion(+)

diff --git a/systemd-user b/systemd-user
index ed4b9fa..a701acd 100644
--- a/systemd-user
+++ b/systemd-user
@@ -9,4 +9,5 @@ session  required pam_selinux.so close
 session  required pam_selinux.so nottys open
 session  required pam_loginuid.so
 session  optional pam_keyinit.so force revoke
+session  optional pam_umask.so silent
 session  include system-auth