diff --git a/plugins/mod_posix.lua b/plugins/mod_posix.lua
index 0f28041c2..8c2c7d7dd 100644
--- a/plugins/mod_posix.lua
+++ b/plugins/mod_posix.lua
@@ -23,6 +23,9 @@ local prosody = _G.prosody;
 
 module.host = "*"; -- we're a global module
 
+local umask = module:get_option("umask") or "027";
+pposix.umask(umask);
+
 -- Allow switching away from root, some people like strange ports.
 module:add_event_hook("server-started", function ()
 		local uid = module:get_option("setuid");