diff --git a/KubeOS-Rust/kbimg/src/scripts_gen.rs b/KubeOS-Rust/kbimg/src/scripts_gen.rs
index 9993af1cb8e01fe901c18725611ed48f2d4330e9..b9c53c087545adb777f9bc44bd45b0c40d593984 100644
--- a/KubeOS-Rust/kbimg/src/scripts_gen.rs
+++ b/KubeOS-Rust/kbimg/src/scripts_gen.rs
@@ -486,6 +486,7 @@ pub(crate) fn gen_admin_vars(file: &mut dyn Write, docker_img: &str, hostshell:
         file,
         r#"set -eux
 
+umask 022
 SCRIPTS_DIR=$(dirname "$0")
 LOCK="${{SCRIPTS_DIR}}"/test.lock
 ADMIN_CONTAINER_DIR="${{SCRIPTS_DIR}}"/admin-container
diff --git a/KubeOS-Rust/kbimg/src/values.rs b/KubeOS-Rust/kbimg/src/values.rs
index 7cf322e19018defb055ee69e2cda659c6d3b72ce..928a22ebd0bb32bad01b4767ba5f3eae75e457bc 100644
--- a/KubeOS-Rust/kbimg/src/values.rs
+++ b/KubeOS-Rust/kbimg/src/values.rs
@@ -70,6 +70,7 @@ pub const COPYRIGHT: &str = r#"# Copyright (c) Huawei Technologies Co., Ltd. 202
 
 pub const GLOBAL_VARS: &str = r#"set -eux
 
+umask 022
 NAME=KubeOS
 ID=kubeos
 SCRIPTS_DIR=$(cd "$(dirname "$0")" && pwd)