diff --git a/mklive.sh.in b/mklive.sh.in
index be41374..9071f0f 100644
--- a/mklive.sh.in
+++ b/mklive.sh.in
@@ -27,6 +27,7 @@
 # THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 #-
 trap 'error_out $? $LINENO' INT TERM 0
+umask 022
 
 readonly REQUIRED_PKGS="base-files libgcc dash coreutils sed tar gawk syslinux grub-i386-efi grub-x86_64-efi squashfs-tools xorriso"
 readonly INITRAMFS_PKGS="binutils xz device-mapper"