diff --git a/debian/control b/debian/control
index ee7de76..e2afb3c 100644
--- a/debian/control
+++ b/debian/control
@@ -115,3 +115,6 @@ Description: enhances misc security settings
  .
  A systemd service mounts /proc with hidepid=2 at boot to prevent users from
  seeing each other's processes.
+ .
+ The default umask is changed to 006. This allows only the owner and group to read
+ and write to newly created files.