diff --git a/etc/guix-install.sh b/etc/guix-install.sh
index bd3ab901ad..111e25fbcb 100755
--- a/etc/guix-install.sh
+++ b/etc/guix-install.sh
@@ -439,6 +439,7 @@ main()
 
     _msg "${INF}system is ${ARCH_OS}"
 
+    umask 0022
     tmp_path="$(mktemp -t -d guix.XXX)"
 
     guix_get_bin_list "${GNU_URL}"