diff --git a/abuild.in b/abuild.in
index 5d4b74a..d8c6029 100644
--- a/abuild.in
+++ b/abuild.in
@@ -30,6 +30,8 @@ BUILD_BASE="build-base"
 
 apk_opt_wait="--wait 30"
 
+umask 022
+
 # run optional log command for remote logging
 logcmd() {
 	${ABUILD_LOG_CMD:-true} "$@"