Use a constant umask

rootfs.py

@@ -159,6 +159,9 @@ def main():
     else:
         args.swap = 0
 
+    # Set constant umask
+    os.umask(0o022)
+
     # bootstrap.cfg
     try:
         os.remove(os.path.join('steps', 'bootstrap.cfg'))

steps/helpers.sh

@@ -7,6 +7,9 @@
 #
 # SPDX-License-Identifier: GPL-3.0-or-later
 
+# Set constant umask
+umask 022
+
 # Get a list of files
 get_files() {
     echo "."