diff --git a/entrypoint.sh b/entrypoint.sh
index f984963..51604cb 100755
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -32,6 +32,7 @@ start() {
     wait $bridge_pid
 }
 
+umask 077
 case "${1:-}" in
   setup)
     setup