/etc/pam.d/common-session :

session optional pam_umask.so umask=027