diff --git a/.profile.common b/.profile.common
--- a/.profile.common
+++ b/.profile.common
@@ -1,5 +1,7 @@
 # simple profile stuff that is common to both zsh and bash
 
+umask 027
+
 make -s -C ~/.ssh
 
 export EDITOR=vim
@@ -22,4 +24,3 @@ fi
 if [ -f ~/.profile.common.local ]; then
   source ~/.profile.common.local
 fi
-