diff --git a/templates/dynamic/ext/sh b/templates/dynamic/ext/sh
index 52b3fc0..673ead1 100755
--- a/templates/dynamic/ext/sh
+++ b/templates/dynamic/ext/sh
@@ -9,6 +9,7 @@ cat <<-EOF
 #=========================================
 
 set -euo pipefail
+umask 0022
 export LANG=en_US.UTF-8
 trap Quit EXIT