Comment 12 for bug 253096

The issue that sudo's pam config is not including the common-session configuration is now tracked separately Bug #549172
and the /etc/pam.d/common-session{,-noninteractive} patch would be the right seed to call pam_umask.