From 97100de8d06117ecff5f94eeb7a38e8cbd073fec Mon Sep 17 00:00:00 2001
From: Brad Davidson <brad.davidson@rancher.com>
Date: Tue, 14 Feb 2023 00:29:59 +0000
Subject: [PATCH] Improve default umask for certs.sh

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
---
 contrib/util/certs.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/contrib/util/certs.sh b/contrib/util/certs.sh
index bc6cdca3f5..67c572ac90 100755
--- a/contrib/util/certs.sh
+++ b/contrib/util/certs.sh
@@ -21,6 +21,7 @@
 #   intermediate-ca.key.
 
 set -e
+umask 027
 
 CONFIG="
 [v3_ca]