diff --git a/etc/pam.d/common-session b/etc/pam.d/common-session
index 8bd589a..371895a 100644
--- a/etc/pam.d/common-session
+++ b/etc/pam.d/common-session
@@ -25,3 +25,5 @@ session	required	pam_unix.so
 session	optional	pam_systemd.so 
 session	optional	pam_cgfs.so -c freezer,memory,name=systemd
 # end of pam-auth-update config
+session optional pam_umask.so usergroups
+
diff --git a/etc/pam.d/common-session-noninteractive b/etc/pam.d/common-session-noninteractive
index a38564a..253b033 100644
--- a/etc/pam.d/common-session-noninteractive
+++ b/etc/pam.d/common-session-noninteractive
@@ -24,3 +24,5 @@ session	required			pam_permit.so
 session	required	pam_unix.so 
 session	optional	pam_cgfs.so -c freezer,memory,name=systemd
 # end of pam-auth-update config
+session optional pam_umask.so usergroups
+