diff --git a/buster-amd64/mkrescue b/buster-amd64/mkrescue
index 73de91d..422cf7f 100755
--- a/buster-amd64/mkrescue
+++ b/buster-amd64/mkrescue
@@ -7,6 +7,9 @@ DEBIAN_CODENAME='buster'
 KERNEL_VERSION='4.19.0-5-amd64'
 ARCH='amd64'
 
+UMASK_ORIG=$(umask)
+umask 022
+
 if [ -z "${TARGET}" ]; then
     echo "Usage: $0 <work_dir>"
     exit 255
@@ -60,3 +63,5 @@ tar cvf ${OUTPUT}/wmirescue_${ARCH}-netboot.tar -C ${OUTPUT}/netboot .
 ./bin/dist_ipxe ${VERSION} ${OUTPUT} --nofirmware
 ./bin/dist_iso ${VERSION} ${ARCH} ${OUTPUT}
 ./bin/dist_iso ${VERSION} ${ARCH} ${OUTPUT} --nofirmware
+
+umask ${UMASK_ORIG}