Set default umask to 0027
@@ -15,4 +15,8 @@ rm -f /tmp/linux-image-cloud-amd64_5.4.19-1_amd64.deb
apt-mark hold linux-image-cloud-amd64
# set default umask to a more conservative value
-sed -i 's/UMASK\t\t022/UMASK\t\t027/' login.defs
+sed -i 's/UMASK\t\t022/UMASK\t\t027/' /etc/login.defs
+cat <<EOF >>/etc/pam.d/common-session
+# Allow umask to be changed
+session optional pam_umask.so
+EOF
