Set the default file creation umask
You modify the default file creation umask so that, by default, users in your group have read-only access to files you create. Users outside your group have no access to the files you create.
Perform these steps using the non-privileged user account on the application server.
Parent topic: Prepare the application server