diff --git a/articles/enroll-hosts.md b/articles/enroll-hosts.md
index 0dccd003aa3e..7f383099627a 100644
--- a/articles/enroll-hosts.md
+++ b/articles/enroll-hosts.md
@@ -27,6 +27,8 @@ The `--type` flag is used to specify the fleetd installer type.
 
 A `--fleet-url` (Fleet instance URL) and `--enroll-secret` (Fleet enrollment secret) must be specified in order to communicate with Fleet instance.
 
+> `fleetctl` on macOS/Linux requires `umask` to be `022`/`002` and `/tmp` (used during package generation) has to be mounted without `noexec`.
+
 #### Example
 
 Generate fleetd on macOS (.pkg)