pam: add call to pam_umask

Setting umask for user sessions via UMASK setting in /etc/login.defs is
a well-known feature. Let's make sure that user manager also runs with
this umask value.

Follow-up for 5e37d1930b41b24c077ce37c6db0e36c745106c7.

diff --git a/src/login/systemd-user.in b/src/login/systemd-user.in
index 9a665bd95946b0b87df6c495a84d3affcc65235c..8a3c9e0165fd69e450621f058ec8b0e04fe77e11 100644 (file)
--- a/src/login/systemd-user.in
+++ b/src/login/systemd-user.in
@@ -19,4 +19,5 @@ session  required   pam_namespace.so
 {% if ENABLE_HOMED %}
 -session optional   pam_systemd_home.so
 {% endif %}
+session  optional   pam_umask.so silent
 session  optional   pam_systemd.so