diff --git a/lib/pkgdb.c b/lib/pkgdb.c
index 7652099d..011bc7a6 100644
--- a/lib/pkgdb.c
+++ b/lib/pkgdb.c
@@ -92,7 +92,7 @@ xbps_pkgdb_lock(struct xbps_handle *xhp)
 		}
 	}
 
-	prev_umask = umask(0644);
+	prev_umask = umask(022);
 	if ((pkgdb_fd = open(xhp->pkgdb_plist, O_CREAT|O_RDWR|O_CLOEXEC, 0664)) == -1) {
 		rv = errno;
 		xbps_dbg_printf(xhp, "[pkgdb] cannot open pkgdb for locking "