ask has been compiled with usergroups enabled by default and you want to disable it at runtime.
umask=mask

  Sets the calling process's file mode creation mask (umask) to `mask` & 0777. The value is interpreted as Octal.

### 6.38.3. MODULE TYPES PROVIDED

Only the `session` type is provided.

### 6.38.4. RETURN VALUES

PAM_SUCCESS

  The new umask was set successfully.

PAM_BUF_ERR

  Memory buffer error.

PAM_CONV_ERR

  The conversation method supplied by the application failed to obtain the username.

PAM_INCOMPLETE

  The conversation method supplied by the application returned PAM_CONV_AGAIN.

PAM_SERVICE_ERR

  No username was given.

PAM_USER_UNKNOWN

  User not known.

### 6.38.5. EXAMPLES

Add the following line to `/etc/pam.d/login` to set the user specific umask at login:

            session optional pam_umask.so umask=0022

### 6.38.6. AUTHOR

pam_umask was written by Thorsten Kukuk <kukuk@thkukuk.de>.

Prev | Up | Next
6.37. pam_tty_audit - enable/disable tty auditing | Home | 6.39. pam_unix - traditional password authentication