diff --git a/roles/common/files/pam_umask b/roles/common/files/pam_umask
new file mode 100644
index 0000000000000000000000000000000000000000..69967cfbc93b54e3dc219101cf7a374c94cec975
--- /dev/null
+++ b/roles/common/files/pam_umask
@@ -0,0 +1,6 @@
+Name: Autentication rules for enabling the use of pam_umask
+Default: yes
+Priority: 256
+Session-Type: Additional
+Session:
+        required        pam_umask.so